| %% | Insert % character |
| %n | Name of event source object |
| %a | IP address of event source object |
| %i | Event source object unique ID |
| %t | Event's timestamp is a form day-month-year hour:minute:second |
| %T | Event's timestamp as a number of seconds since epoch (as returned by time() function) - available from version 0.1.12 |
| %c | Event code |
| %s | Event's severity code as number. Possible values are:
| 0 | = NORMAL |
| 1 | = WARNING |
| 2 | = MINOR |
| 3 | = MAJOR |
| 4 | = CRITICAL |
|
| %S | Event's severity code as text |
| %v | NetXMS server version |
| %m | Event's message text (meaningless in event template) |
| %1 - %99 | Event's parameter number 1..99 |