...
If Varonis app for ArcSight is available, clicking the Edit Alert Template will trigger a new pop-up window to verify Alert template format (verify using theabove log format). If you are creating new “Alert Template“, use above log format and follow next steps.
...
Click Apply to alert methods, select Syslog message and click OK. If a different template was previously selected and you're modifying it, a confirmation prompt will appear, prompting you to select Yes.
...