I may be very thick and missing something in front of my face, but is there a built in variable I can use to display the rule name in an email notification? It isn't turning up in searches or doc I've checked.
I always like to include the appropriate "source" in the notifications to help sort out which notification caused the email (I do that in Orion and other tools), but SEM doesn't seem to allow that. If I'm sending email for a login failure, I can't pass InternalRuleFired-InferenceRule to the template if it isn't in the correlation.
I can always include the Rule Name as a constant manually in every rule, but this seems that it'd be more of a native feature. Am I missing something obvious in how to do this in SEM? I'm currently running 6.7.2.