What alerts are generated for tunnel certificates which are about to expire? Can these be changed?
Release : 20.3
The alarm sent by hub for the tunnel certificate expiration is hardcoded, we cannot change the severity, but the severity gets set automatically as follows:
-- When tunnel certificate is 30 days from expiration, INFORMATION level alarm is sent once per day;
-- When tunnel certificate reaches 14 days from expiration, alarm is raised as MINOR severity and is sent once per day;
-- When tunnel certificate reaches 7 days from expiration, alarm is raised as CRITICAL severity and is sent once per day.
When tunnel certificate expiration is >30 days, a clear alarm is sent.