Modify System Alerts

[aboyd1227]

I'm wondering if it's possible to modify alerts in PAN-OS. We've enabled email notifications for critical alerts and I'd like to change one type in particular. Our firewalls begin sending alerts related to license expiration 30 days in advance. Is it possible to change it to 60 days?

Example Alert:
SYSTEM ALERT : critical : License for feature wildfire will expire on 2025/06/10

[OtakarKlier · Accepted solution]

Hello,

I dont think it is. The alerts are preprogramed into the device. I understand what you are attempting to do and I just use calendar reminders of when things are expiring with appropriate lead times.

Regards,

[aboyd1227]

I figured that'd be the case. Thanks for responding

[kiwi]

Hi @aboyd1227 ,

As @OtakarKlier  mentioned these alerts are hardcoded.

You could run a scheduled script (e.g. via the API or CLI) that checks the license status of each firewall, parses the expiration date and triggers an external alert (e.g., email, slack, ... ) 60 days in advance.
This isn't built in and requires some scripting but gives you full control over timing.

In case you're sending logs to Strata Logging Service you can build custom alerts/playbooks to detect license expiry earlier than 30 days if your logs or data includes the license end date.

Kind regards,

-Kim.