Is it possible to edit the alert threshold for license expiration?

Products

• CAS-S400
• Management Center
• Management Center - VA

Issue/Introduction

Is it possible to edit the alert threshold for license expiration?
The license of our CAS's will expire soon but the renewal is already ordered and that's why I like to set the threshold to 7 days.

I tried no alerts destinations local LICENSE_EXPIRATION but there are still warnings in our MC.

Resolution

For the query raised, please refer to the below.

Device license errors

• Raise alert whenever a device's license (or any of its sub-components) are about to expire. The warning shows within 30 days of the expiration, by default. License component <component_name>, for device <device_name> has, or will, expire on <date>. To modify the warning threshold, please refer to the snippet below, for guidance.

• If a device license expires, the warning alert closes to open an error alert. The state changed from NEW to CLOSED. The system closed the alert because the license expired.

• If a device license in the warning state is renewed, the warning alert closes because of subscription renewal. The state changed from NEW to CLOSED. The system closed the alert because the license was renewed.

• If a device license in the error state is renewed, the error alert closes because of subscription renewal. State changed from NEW to CLOSED. The system closed the alert because the license was renewed.

 

Note:

These alerts are errors that Management Center detects on a managed device, like CAS, Proxy, etc. These alerts are triggered from events such as the loss of connectivity, or when a device takes too long to respond, or license expiration, etc.. The associated settings are on the Administration > Settings > Alerts page.

To enable the alerts, you must select the global option called Raise alerts on device errors. After enabling that option, you can enable or disable individual alerts or change the alert thresholds and severity.

To configure the alert, set a threshold that must be exceeded to trigger the alert and then set the severity. The severity level triggers alert notification. The severity can be set to INFO, WARNING, or ERROR.

Note 2: The license warning threshold should be set before it actually kicks in. There isn't a documented guidance on whether, or not, the change would apply after the already set threshold kicks in. We recommend to have this set well before the existing warning threshold kicks in.

Ref. doc.: https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/management-center/3-2/add_monitor_devices/notifications_alerts/device-alerts.html