ISE 2.6 Alarm settings conditions

[Jalo]

Can someone guide me how to exactly prepare conditions in email alert section (ISE 2.6).

Should I just type there names? Or use some special phrases "include" "{}" or so?

Also are there any predefined commands that I can use like $user that will show username in email?

[poongarg]

Enter multiple e-mail addresses separated with comma. No special phrases are required.

Email alerts will have ISE hostname.

[Jalo]

Thanks for your reply.

That's what I already know, I want to know some more detailed steps.

For example, if there are too many failed authentication method, is it possible to also place in email name of the user and so on?

Or this is just simple alerting system?