After configuring email notifications for Security Analytics, notification emails that are sent include the IPv4 address of the host instead of the IPv6 address. The appliance is configured with both IPv4 and IPv6 addresses for the management interfaces.
Both IPv4 and IPv6 addresses are configured.
If there is both an IPv4 and an IPv6 address configured on the appliance, the email notification will default to reporting about the affected appliance using the IPv4 address. If the IPv6 address is the only address bound to the appliance, the IPv6 address will be reported in the email subject as well as the body.
This is hard coded by the system to favor IPv4. There is currently not a way to change the preference.