Include email recipient in DLP justification message

[User82876040]

Creating an email protection rule and would like the email recipient to be shown in the justification message when an email is flagged by DLP. Is there a placeholder which will show the email's recipient in the justification message? Or is there another way to do this?

If I use the placeholder %s then I get the email subject. However, I am more interested in the email recipient(s).

[DLP_RS]

Looks like no easy option. I will do some research on it and will post a reply.

[Fademidun]

I can only think of available values below:

• %c for classifications
• %r for rule-set name
• %v for vector (for example, Email Protection, Web Protection, DLP Prevent)
• %a for action (for example, Block)
• %s for context value (for example, file name, device name, email subject, URL)
• %f for context value in McAfee DLP Prevent (for example, file name, email subject, email body, and so on)
%f for context value in McAfee DLP Endpoint (for example, full path, URL)

Perhaps you want to try d - for destination as define in automatic mail notification