I have Orion configured to restart a service. Is there a certain variable I can put into my alert to tell me what service it attempted to restart?
Not that I know of.
Will ${ComponentName} work? You can rename the component to match the service name. I think ${ProcessName} will show the name of the process that is hosting the service (which may not be what you need).
There is a list of all the available variables on pages 41 and 42 of the APM Admin guide.