Message content or counters in KSS NG
This option allows you to choose a variable or counter inside message text. The variable is then replaced with the current value before the message is sent. For example, $Message.MsgText is replaced with the text of the current syslog message. 
To add a variable:
- From the Kiwi Syslog NG navigation bar, choose Setup > Rules.
- Locate an existing rule. If the rule does not exist, add a rule and start the New Rule wizard.
- If you are adding content or counters to the message of to an existing rule, select the rule and click Edit. If you are creating a new rule, navigate to the Actions step of the New Rule wizard.
- Click Add Action. Define the action name in the provided field.
- 
                                    In the Action drop down, select any rule action that includes message text. Current rule actions with message text include E-mail message and Send syslog message. 
- Position your cursor where you want to insert the variable in the message text box.
- Click  and select a variable. and select a variable.
The following variables are available.
All of the message
| Parameter | 
 | 
| Explanation | The entire message as it appears on the display, including the time, date, priority and message text. Each field is space delimited. | 
| Example | 
 | 
Date
| Parameter | 
 | 
| Explanation | The date the message arrived in the format YYYY-MM-DD. | 
| Example | 
 | 
Time
| Parameter | 
 | 
| Explanation | The time the message arrived in the format HH:MM:SS. | 
| Example | 
 | 
Facility
| Parameter | 
 | 
| Explanation | The facility of the message in text format. | 
| Example | 
 | 
Level
| Parameter | 
 | 
| Explanation | The level of the message in text format. | 
| Example | 
 | 
Host address of sender
| Parameter | 
 | 
| Explanation | The host IP address of the sending device. | 
| Example | 
 | 
The message text
| Parameter | 
 | 
| Explanation | The message text part of the syslog message. | 
| Example | 
 |