--- title: "Alert details" canonical: "https://docs.aryaka.com/space/KNOW/1641053/Alert%20details" format: markdown --- This topic describes the MyAryaka alerts and the conditions under which their corresponding notifications are sent. The alerts are organized in the following two main categories each of which contains a number of subcategories: Site alerts Billing Health Usage Customer alerts Billing Health Site alerts About - The site's VPN Path Aryaka connection count has exceeded the configured threshold. Category - Usage Details - The VPN Path Aryaka connection count is the number of connections that are currently configured at your site that connect to other sites using VPN Path Aryaka. The VPN Path Aryaka connection limit is the maximum number of connections from a site to other sites over VPN Path Aryaka. This number depends on the size of your site as determined by its site license type and its subscribed bandwidth (SBW). This alert is sent when the connection count, which is measured as the average count in the last 10 minutes, exceeds a configured percentage of the VPN Path Aryaka connection limit.  Next Steps - View the site's connection count in the VPN Path Aryaka graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph, and then click the TCP Optimization icon in the icon bar at the bottom of the page. Because the site's maximum connection count depends on its site license type and SBW, you may need to upgrade your site license and subscribed bandwidth to increase your connection limit. Contact Aryaka Support for assistance. About - TCP retransmission from the Aryaka POP to the site has exceeded the configured threshold. Category - Health Details - VPN Path Aryaka offers TCP Optimization. This functionality intercepts and optimizes TCP connections by splitting the TCP connection into three segments: Site to local POP Local POP to remote POP Remote POP to remote site This allows Aryaka to accelerate your network traffic. When TCP connections experience loss, the local Aryaka POP retransmits the TCP traffic to the site in an attempt to mitigate the loss. This retransmission, when seen in excess—or persistently over time—is an indication of a lossy or congested edge link.  This alert is sent when when a site's edge retransmission, which is measured as the average retransmission to the site in the last five minutes, exceeds a configured percentage value. Next Steps - Click the   Notifications icon in the top icon pane, click the alert name, click Debug (lower left), and then click Run Debug in the pane that appears. The Debug functionality executes a series of commands including ping and MTR from the POP to the site's tunnel end points. This can help identify loss or congestion on the link. You can also view the site's health linked from the VPN Path Aryaka graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph, and then click the Health icon in the icon bar at the bottom of the page. About - An interface on the active ANAP at a site is down. Category - Health Details - The active ANAP at your site is configured with one of the following insertion modes: Simple Routed Mode, Inline Routed Mode, or Edge Routed mode. These insertion modes have different requirements for how their interfaces are configured and wired. This alert is sent when a configured interface reports its status as Down for a configured period of time. The alert can be configured for Minor, Major, Critical severities if the interface has been down for the specified number of minutes.  Next Steps - Check the physical connectivity of the ANAP interfaces. Depending on the insertion mode, different ANAP interfaces have different expectations: Simple Routed Mode (SRM)—Only the LAN or FLAN is expected to be up. See ANAP configuration - Simple Routed Mode for details. Edge Routed Mode (ERM) and Inline Routed Mode (IRM)—The LAN/FLAN, M1/FM1, M2/FM2 interfaces are expected to be up. See ANAP configuration - Inline Routed Mode  or ANAP configuration - Edge Routed Mod e for details. You can view the current interface status at SD-WAN > Status > siteName > ANAP. About - An interface on the standby ANAP at a site is down. Category - Health Details - The standby ANAP at your site is configured with one of the following insertion modes: Simple Routed Mode, Inline Routed Mode, or Edge Routed mode. These insertion modes have different requirements for how their interfaces are configured and wired. This alert is sent when a configured interface reports its status as Down for a configured period of time. The alert can be configured for Minor, Major, Critical severities if the interface has been down for the specified number of minutes.  Next Steps - Check the physical connectivity of the ANAP interfaces. Depending on the insertion mode, different ANAP interfaces have different expectations: Simple Routed Mode (SRM)—Only the LAN or FLAN is expected to be up. See ANAP configuration - Simple Routed Mode for details. Edge Routed Mode (ERM) and Inline Routed Mode (IRM)—The LAN/FLAN, M1/FM1, M2/FM2 interfaces are expected to be up. See ANAP configuration - Inline Routed Mode  or ANAP configuration - Edge Routed Mod e for details. You can view the current interface status at SD-WAN > Status > siteName > ANAP. About - A site with Standard contract is experiencing bursting Category - Billing Details - Bursting is the capability of a site that allows it to exceed its subscribed bandwidth in times of need. Sites that have been configured for this capability can exceed their bandwidth by a value that equals SBW multiplied by the rate defined in your order form. This alert is sent when the site's usage of the day, which is measured as the 99th percentile of their WAN IN or WAN OUT, exceeds their subscribed bandwidth. The value by which the usage of the day exceeds the SBW is termed overage for the day . Your invoice for the month includes bursting charges if your site has experienced bursting during any day in the month. The exact overage for which you are charged depends on how much bursting your site experienced during the days in the month. For more details on these calculations see the How is my usage calculated? FAQ. Next Steps — MyAryaka does not currently show a graph describing the 99th percentile of a site's traffic. You can use the Monitor pages to view the amount of WAN traffic that was sent or received by a site during the day.  You can also view the site's traffic linked from the VPN Path Aryaka graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph. The Network traffic graph on this page displays the WAN traffic. About - Utilization of an ISP link has exceeded its configured threshold. Category - Health Details - This alert is applicable for Edge Routed Mode (ERM) and Inline Routed Mode (IRM) ANAP deployments. These ANAPs measure the traffic on their M1/F1/FM1 and M2/F2/FM2 interfaces. These interfaces are mapped to the ISPs of the site. Each ISP is configured with uplink and downlink sizes. This alert is sent when the usage of the ISP, which is measured as the average percentage usage in the last 10 minutes, has exceeded the configured threshold. Next Steps   Verify—and if necessary, edit—the ISP configuration for the site at Site > siteName > Site Information. The ISP configuration appears in the Primary ISP Link and Secondary ISP Link panes. View the ISP Utilization graph for the site: click Monitor in the top navigation pane, select the reference site, and view the WAN Traffic by Provider graph.  If you want to increase the capacity of your ISP or limit the traffic on a network, contact Aryaka Customer Support to implement Network Bandwidth Management for your site. About - One or more security connector tunnels are down. Category - Health Details - A site with an ANAP can connect to a cloud security vendor using a cloud security connector. The security connector uses one or more tunnels. Multiple tunnels can be configured in an Active/Standby mode. The system checks for the status of the tunnel every minute. This alert is sent if one or more of the connector's tunnels are down for longer than the specified threshold. If only one tunnel is configured, and it goes down, the alert status appears as Down. If multiple tunnels are configured, and one or more—but not all—goes down, the alert status appears as Degraded. If multiple tunnels are configured, and all of them go down, the alert status appears as Down. Next Steps - Verify the reachability of the tunnel end points from both nodes and check the Aryaka side of the configuration at Sites > siteName > Advanced Config > Cloud Security. See Configure cloud connectors for details. About - One or more cloud transport connector tunnels are down. Category - Health Details - A site with an ANAP can connect to a cloud transport vendor, for example, Azure Virtual WAN. This connector is configured for each gateway to which the site must connect. The cloud transport connector uses one or more tunnels. Multiple tunnels can be configured in an Active/Standby mode. The system checks for the status of the tunnel every minute. This alert is sent if one or more of the connector's tunnels are down for longer than the specified threshold. If only one tunnel is configured, and it goes down, the alert status appears as Down. If multiple tunnels are configured, and one or more—but not all—goes down, the alert status appears as Degraded. If multiple tunnels are configured, and all of them go down, the alert status appears as Down. Next Steps - MyAryaka does not display configuration information for cloud transport connectors and their tunnels. Contact Aryaka Customer Support for assistance. About - The primary path from the Aryaka POP to the site is experiencing packet loss. Category - Health Details - The Aryaka POP monitors the loss between the primary IPSec end points by sending continuous ICMP packets sourced from the POP's primary tunnel IP to the site's primary tunnel IP. These packets are sent at one second intervals. This alert is sent when the loss on the primary path, measured as the average loss in the last five minute sample, has exceeded the configured threshold.  Next Steps - Click the   Notifications icon in the top icon pane, click the alert name, click Debug (lower left), and then click Run Debug in the pane that appears. The Debug functionality executes a series of commands including ping and MTR from the POP to the site's tunnel end points. This can help identify loss or congestion on the link. You can also view the site's Loss to POP graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph, and then click the Health icon in the icon bar at the bottom of the page, and then view the Loss to POP graph.  About - The secondary path from the Aryaka POP to the site is experiencing packet loss. Category - Health Details - The Aryaka POP monitors the loss between the secondary IPSec end points by sending continuous ICMP packets sourced from the POP's secondary tunnel IP to the site's secondary tunnel IP. These packets are sent at one second intervals. This alert is sent when the loss on the primary path, measured as the average loss in the last five minute sample, has exceeded the configured threshold.  Next Steps - Click the   Notifications icon in the top icon pane, click the alert name, click Debug (lower left), and then click Run Debug in the pane that appears. The Debug functionality executes a series of commands including ping and MTR from the POP to the site's tunnel end points. This can help identify loss or congestion on the link. You can also view the site's Loss to POP graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph, and then click the Health icon in the icon bar at the bottom of the page, and then view the Loss to POP graph.  About - The primary IPsec tunnel from the site to the Aryaka POP is down. Category - Health Details - Aryaka enables a site to be configured with redundant IPSec tunnels to connect to the Aryaka POP. The system checks the status of the primary tunnel every minute. This alert is sent when the primary tunnel is down for longer than the configured duration.  Next Steps - Click the   Notifications icon in the top icon pane, click the alert name, click Debug (lower left), and then click Run Debug in the pane that appears. The Debug functionality executes a series of commands including ping and MTR from the POP to the site's tunnel end points. This can help identify loss or congestion on the link. You can also view the site's Loss to POP graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph, and then click the Health icon in the icon bar at the bottom of the page, and then view the Loss to POP graph.  About - The secondary IPsec tunnel from the site to the Aryaka POP is down. Category - Health Details - Aryaka enables a site to be configured with redundant IPSec tunnels to connect to the Aryaka POP. The system checks the status of the secondary tunnel every minute. This alert is sent when the secondary tunnel is down for longer than the configured duration.  Next Steps - Click the   Notifications icon in the top icon pane, click the alert name, click Debug (lower left), and then click Run Debug in the pane that appears. The Debug functionality executes a series of commands including ping and MTR from the POP to the site's tunnel end points. This can help identify loss or congestion on the link. You can also view the site's Loss to POP graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph, and then click the Health icon in the icon bar at the bottom of the page, and then view the Loss to POP graph.  About - Both the primary and secondary tunnels from the site to the Aryaka POP is down. Category - Health Details - Aryaka enables a site to be configured with redundant IPSec tunnels to connect to the Aryaka POP. The system checks the status of the primary and secondary tunnels every minute. This alert is sent when both the primary and secondary tunnels are down for longer than the configured duration.  Next Steps - Click the   Notifications icon in the top icon pane, click the alert name, click Debug (lower left), and then click Run Debug in the pane that appears. The Debug functionality executes a series of commands including ping and MTR from the POP to the site's tunnel end points. This can help identify loss or congestion on the link. You can also view the site's Loss to POP graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph, and then click the Health icon in the icon bar at the bottom of the page, and then view the Loss to POP graph.  About - The primary path from Aryaka's POP to the site is experiencing high latency. Category - Health Details - The Aryaka POP monitors the latency between the primary IPSec end points by sending continuous ICMP packets sourced from the POP's primary tunnel IP to the site's primary tunnel IP. These packets are sent one second intervals. This alert is sent when the latency on the path, measured as the average latency in the last 60 minutes, has exceeded the configured threshold for more than five minutes. Next Steps - Click the   Notifications icon in the top icon pane, click the alert name, click Debug (lower left), and then click Run Debug in the pane that appears. The Debug functionality executes a series of commands including ping and MTR from the POP to the site's tunnel end points. This can help identify loss or congestion on the link. You can also view the site's Latency to POP graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph, and then click the Health icon in the icon bar at the bottom of the page, and then view the Latency to POP graph.  About - The secondary path from Aryaka's POP to the site is experiencing high latency. Category - Health Details - The Aryaka POP monitors the latency between the secondary IPSec end points by sending continuous ICMP packets sourced from the POP's secondary tunnel IP to the site's secondary tunnel IP. These packets are sent one second intervals. This alert is sent when the latency on the path, measured as the average latency in the last 60 minutes, has exceeded the configured threshold for more than five minutes. Next Steps - Click the   Notifications icon in the top icon pane, click the alert name, click Debug (lower left), and then click Run Debug in the pane that appears. The Debug functionality executes a series of commands including ping and MTR from the POP to the site's tunnel end points. This can help identify loss or congestion on the link. You can also view the site's Latency to POP graph: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph, and then click the Health icon in the icon bar at the bottom of the page, and then view the Latency to POP graph.  About - The site's VPN Path Aryaka throughput has exceeded the configured threshold. Category - Usage Details - A site is configured with a certain amount of subscribed bandwidth. This bandwidth is committed to sending and receiving traffic at a site. This alert is sent when the throughput of the site, which is measured as the average percentage rate of traffic in the last 10 minutes, has exceeded a configured percentage threshold. Next Steps - View the site's throughput for the VPN Path Aryaka network: click Monitor in the top navigation pane, select the reference site, click the VPN Path Aryaka bubble in the WAN Traffic by Network graph. The Network Traffic graph on this page displays the WAN traffic. About - The site-to-site tunnel configured on the ANAP is down. Category - Health Details - A site with an ANAP can be configured to connect to a remote site with an ANAP using an IPSec tunnel over an internet link. This connection is called VPN Path Internet or Internet VPN . This is an optional feature that can be purchased for any site. These tunnels can be configured to process the traffic if VPN Path Aryaka fails for a site pair, or to carry specific traffic that you determine is well served by the internet. The use of VPN Path Internet can save bandwidth when used instead of VPN Path Aryaka. The ANAP monitors each site pair's Internet VPN Tunnel. This alert is sent for both sites when the tunnel between them is down in excess of the configured amount of time.  Next Steps - MyAryaka does not display the site pair's tunnel information. If these tunnels were already up and have gone down since then, inspect your ISP's configuration for any IP changes. Also inspect your firewall for a rule that prevents the ANAPs from reaching each other. If you discover no configuration changes were made to the sites' network, or no firewall rule that prevents connectivity, contact Aryaka Customer Support for assistance restoring the tunnel connectivity. About - The ISP link connected to a site's ANAP is in a Bad or Degraded state. Category - Health Details - A site with an ANAP configured in Edge Routed Mode or Inline Routed Mode includes the Internet Traffic Controller . The ANAP monitors the health of each ISP link using ICMP probes to 8.8.8.8 every three seconds. Loss is calculated for a window of 30 seconds. If the loss for four of these windows exceeds 20%, the link status is considered Bad. The Internet Health alert evaluates the link state of one or both ISPs at a site. This alert is sent for two states: Degraded and Bad. The following table describes the value of Internet Health Status depending on the status of individual ISP links at the site. Link 1 Status Link 2 Status Internet Health Status Good Good Good (no alert) Good Bad Degraded Bad Bad Bad Good Not Provisioned Good (no alert) Bad Not Provisioned Bad The threshold for this alert is configured as the duration for which the Internet Health status is Bad or Degraded. Next Steps - View the site's ITC Loss graph to determine the health of each ISP at the site: click Monitor in the top navigation pane, select the reference site, click the Direct Internet bubble in the WAN Traffic by Network graph, and then click the Health icon in the icon bar at the bottom of the page, and then view the ITC Loss graph.  If Aryaka manages the link, contact Aryaka Support. If you manage the link, contact your Internet Service Provider. About - A site's active ANAP is unable to establish connectivity with the Aryaka Provisioning Server that is required to manage the ANAP. Category - Health Details - A site's active ANAP gets its bootstrap configuration file from the Aryaka Provisioning Server. This configuration is then used to bring up the tunnel to the POP. The Aryaka Provisioning Server is also responsible for deploying Aryaka images, certificates, and virtual machine images under certain circumstances. The ANAP connects to this server every 10 minutes using HTTPS to ensure it has the latest configuration it needs to connect to an Aryaka POP. This alert reports the status as Down if the ANAP is unable to connect to the provisioning server. The threshold for this alert is the time that the Aryaka provision server connectivity is down. Next Steps - Ensure that the perimeter devices have been configured with rules that permit the ANAP to connect outbound using HTTPS. If you need assistance, Contact Aryaka Customer Support . About - A site's standby ANAP is unable to establish connectivity to the Aryaka Provisioning Server that is required to manage the ANAP. Category - Health Details - A site's standby ANAP gets its bootstrap configuration file from the Aryaka Provisioning Server. This configuration is then used to bring up the tunnel to the POP. The Aryaka Provisioning Server is also responsible for deploying Aryaka images, certificates, and virtual machine images under certain circumstances. The ANAP connects to this server every 10 minutes using HTTPS to ensure it has the latest configuration it needs to connect to an Aryaka POP. This alert reports the status as Down if the ANAP is unable to connect to the provisioning server. The threshold for this alert is the time that the Aryaka provision server connectivity is down. Next Steps - Ensure that the perimeter devices have been configured with rules that permit the ANAP to connect outbound using HTTPS. If you need assistance, Contact Aryaka Customer Support . About - A SaaS application for the region is experiencing bursting usage. Category - Billing Details - Bursting is the capability of a SaaS application that allows it to exceed its subscribed bandwidth in times of need. A SaaS application that has been configured for this capability can exceed their bandwidth by a value that equals the SBW multiplied by the rate defined in your order form. This alert is sent when the SaaS application's usage for the day, which is measured as the 99th percentile of their WAN IN or WAN OUT, exceeds their subscribed bandwidth. The value by which the usage for that day exceeds the SBW is termed overage for the day . Your invoice for the month includes bursting charges if your SaaS app has experienced bursting during any day in the month. The exact overage for which you are charged depends on how much bursting your SaaS app experienced during the days in the month. For more details on these calculations see the How is my usage calculated? FAQ. About - A DHCP server is down. Category - Health Details - A site's ANAP can be configured to act as a DHCP server for the zones at your site. The DHCP sever automatically assigns IP addresses to devices that connect to your network from a pool of available IP addresses.  This alert is sent if the DHCP server status is Down for longer than the configured duration. Next Steps - View the status of the DHCP server for a site in MyAryaka by navigating to SD-WAN > Status, selecting the site where DHCP server is down, and opening the DHCP tab on the site details page.  Contact Aryaka Customer Support for assistance with restoring the DHCP server.  About - A DHCP relay is down. Category - Health Details - A site's ANAP can be configured to relay DHCP requests to a DHCP server at a remote site. Each DHCP relay can include up to 10 relay agents (ANAPs). The relay agent acts as a client-server interface that forwards DHCP requests and replies between the client and the DHCP server. This alert is sent if the DHCP Relay status is Down for longer than the configured duration. Next Steps - View the status of the DHCP relay for a site in MyAryaka by navigating to SD-WAN > Status, selecting the site where DHCP relay is down, and opening the DHCP tab on the site details page.  Contact Aryaka Customer Support for assistance with restoring the DHCP relay.  About - A DHCP server is low on available IP addresses to lease to DHCP clients. Category - Health Details - Each DHCP server has a DHCP pool—a range of IP addresses that it can lease to DHCP clients. If all IP addresses in the pool are leased to clients, new DHCP clients are not able to obtain an IP address.  This alert is sent if the number of available IP addresses in the DHCP pool is lower than the configured threshold.  Next Steps - You can check your DHCP configuration and edit your DHCP pools in MyAryaka by navigating to Sites > siteName > DHCP. See Configure DHCP  for details. If you need assistance,  contact Aryaka Customer Support . Customer alerts About - A certificate uploaded to the Aryaka Vault has expired or is about to expire. Category - Health Details - Aryaka allows customers to upload SSL Certificates to the Aryaka Vault so that these certificates can be used when performing SSL interception. This alert is sent when a certificate in the Aryaka Vault is about to expire or has expired. The alert can be configured with thresholds indicating the number of days the certificate has remaining to stay valid.  Next Steps - This alert can be resolved by uploading a new certificate to the Aryaka Vault at Global Settings > Vault > Static Certificates > SSL Certificates. See Add static certificates for details. If the certificate does not belong to you, Contact Aryaka Customer Support . About - Total SmartCDN usage for your Bill to Date is greater than or equal to 95% of the Dollar Commit in your contract. Category - Billing Details - The SmartCDN Usage Cost alert is sent when your total domain usage for the current month exceeds 95% of your contracted Dollar Commit. This alert automatically resolves at the end of the month.  Next Steps - Go to IP App Domains > Monitor > Traffic Details to view total traffic for all domains. If required, contact Aryaka Sales or your account representative to increase your commit. About - Your user count for Private Access, NGFW-SWG, Anti-malware, or IPS subscription is experiencing a high user count. Category - Billing Details - Aryaka's Private Access service allows home users to access Aryaka's core services when accessing branch offices, data centers, and other network entities. The Private Access service is contracted for a certain number of users. NGFW-SWG, Anti-malware, and IPS services provide advanced security to your private access users. This alert is sent when, in a calendar month, the number of unique users accessing the service exceeds the contracted number of users. This alert is applicable for Standard and Enterprise Flex V3 contracts and automatically resolves at the end of the day. Next Steps - Go to Universal ZTNA > Monitor page to view the count of unique users using the network. If required, contact Aryaka Sales or your account representative to increase your subscription. About - A configuration in your subscription exceeds its contracted value. Category - Billing Details - This alert applies to Enterprise Flex V3 contracts. For a calendar month, every day the system checks for the Elastic usage of a SKU. If there is excess usage, an alert is sent. There is a unique alert for each SKU. Refer to the Usage Calculations section of View contract details (v3) for details about how the calculation is done. The threshold for this alert is not configurable and the alert is automatically resolved at the end of the month. Next Steps - Contact your account manager about upgrading your contract to avoid oversubscription charges. Alternatively, change your configuration so that your usage does not exceed the contracted quantity.  About - A region is experiencing high inter-region usage. Category - Billing Details - This alert applies to your Regional Sites under an Enterprise Flex V3 contract. For a calendar month, every day the system checks for the inter-region usage of a regional SKU. This is calculated on maximum of the 99th percentile of the Sum of WAN IN for all inter-regional sites and 99th percentile of the Sum of WAN OUT for all inter-regional sites. There is a unique alert for each regional SKU. For more details on these calculations see the How is my usage calculated? FAQ. The threshold for this alert is not configurable and the alert is automatically resolved at the end of each month. About - The Aryaka SmartAccess concentrator (SMAC) for a specific region is observing bursting usage. Category -   Billing Details - This alert applies to Standard 2020 contracts. For a calendar month, every day the system checks for the bursting usage of a concentrator. If the concentrator is experiencing bursting on the SBW, the alert is sent. This is calculated on 99th percentile of origin SBW (Maximum of IN and OUT). For more details on these calculations see the How is my usage calculated? FAQ. The threshold for this alert is not configurable and the alert is automatically resolved at the end of each month. About - A region's throughput is exceeding its subscribed bandwidth. Category - Billing Details - This alert applies to your Enterprise Flex V3 contract. Depending on whether your contract is in the Deployment Period or the Subscription Period, the calculation for bursting is different. Refer to the Usage Calculations section of View contract details (v3) for details about how the calculation is performed.  The threshold for this alert is not configurable and the alert is automatically resolved at the end of the month. About - A customer's total bandwidth is exceeding what that customer is entitled to. Category - Billing Details - This alert applies to your Enterprise Flex V3 and Standard 2020 contract. Depending on whether your contract is in the Deployment Period or the Subscription Period, the calculation for Overage is different. Refer to the Usage Calculations section of View contract details (v3) for details about how the calculation is performed.  The threshold for this alert is not configurable and the alert is automatically resolved at the end of the month. In this topic Related topics Configure alerts by site Configure alert notifications by user group View and manage alerts View, edit, and create alert policies View the Alert Audit log