Type string READONLY

alertkeymatch contains the pattern matched by pmlocald. This variable is not available for use in the policy file, it is only available in the event log. To view the event log, use the pmlog -l command.

#view all alerts recorded in the audit log that match the pattern "passwd" 
pmlog -l -c 'alertkeymatch == "passwd"'