Google Message Security Batch Reference Guide - Manual (Page 247)

250
Notification type descriptions:
• attachment_manager_inbound -- Notification sent when an attachment
arrives on inbound mail. This is only used with Message Security installations.
• state=< user | quarantine redirect | both | off> -- Sends attachment
manager notifications directly to the user, the quarantine redirect address,
both the user and the redirect, or off. This is optional.
• text= | link: |
unlink -- The text parameter resets the organization’s notification
message to the default, shares the notification with another organization
which can be modified by either org, unlink shared notifications. When
unlinking shared notifications, the designated org keeps a copy of the
notification, but it can not be updated by the other sharing org. This is
optional.
• attachment_manager_outbound -- Notification sent when an attachment is
sent on outbound mail. This is only used with Message Security installations.
• state=< user | quarantine redirect | both | off> -- Sends attachment
manager notifications directly to the user, the quarantine redirect address,
both the user and the redirect, or off. This is optional.
• text= | link: |
unlink -- The text parameter resets the organization’s notification
message to the default, shares the notification with another organization
which can be modified by either org, unlink shared notifications. When
unlinking shared notifications, the designated org keeps a copy of the
notification, but it can not be updated by the other sharing org. This is
optional.
• early_detection_quarantine -- Notification sent when early detection places a
potential threat under quarantine.
• state=< on | off> -- An on/off switch for early detection notifications. This
corresponds to the zero_hour_notify_on field shown in the displayorg
output. This is optional.
• text= | link: |
unlink -- The text parameter resets the organization’s notification
message to the default, shares the notification with another organization
which can be modified by either org, unlink shared notifications. When
unlinking shared notifications, the designated org keeps a copy of the
notification, but it can not be updated by the other sharing org. This is
optional.
This corresponds to the zero_hour_notify_text field shown in the
displayorg output.