Identity server license will expire within 90 days

Description

This alert is triggered when the Identity Server license check reports that the Duende IdentityServer license used by the Relativity Identity Service is still valid but will expire within 90 days.

Resolution Guidance

Impact When Active

There is no immediate impact. This alert is an early warning that the Duende IdentityServer license will expire soon. If it is not renewed before it expires, the "Identity server license is expired" alert is triggered and the Identity Service runs without a valid license.

How To Resolve

  • Confirm the remaining time by calling the Identity Service license endpoint (Duende/GetLicenseInfo, for example https://<host>/RIS/Identity/Duende/GetLicenseInfo) from the host reporting the alert. The response shows status, isValid, expirationDate, and daysUntilExpiration.
  • The Duende IdentityServer license key is built into the Relativity Identity Service. It is not a setting that can be edited in Relativity, an instance setting, or a configuration file.
  • Contact Relativity Support to obtain a Relativity Server version or patch that includes a renewed Duende IdentityServer license key.
  • Plan the upgrade of the Identity Service to that version or patch before the expiration date.
    • Schedule the upgrade in a maintenance window and warn users of a possible brief authentication disruption while the Identity Service restarts.
  • After the upgrade, call the license endpoint again and confirm daysUntilExpiration is above 90. The alert clears within about 30 minutes, once a license check reports a valid license (the license check and the alert each run every 15 minutes).

Alert Details

The alert is active for the following conditions in Relativity:

  • When the Identity Server license check reports a valid license (relsvr_idsvr_license_valid is true) with relsvr_idsvr_license_days_remaining of 90 days or fewer.

The Environment Watch OTEL collector on the SQL Primary server calls the Identity Service license endpoint every 15 minutes, only when the Next-Gen Identity Service is installed. Each call makes the Identity Service emit the license telemetry that this alert evaluates.

Alert Condition Details

Name Value
Rule Type Elastic Query
Data View logs-*
Filter Query service.name : "Relativity_Server_IdentityService" AND labels.relsvr_idsvr_license_valid : true AND numeric_labels.relsvr_idsvr_license_days_remaining <= 90
Threshold > 0
Time Window 30 minutes
Frequency 15 minutes

Alert Metric Details

Metric Name:

  • numeric_labels.relsvr_idsvr_license_days_remaining

Metric Description:

  • This metric reports the number of days until the Duende IdentityServer license used by the Identity Service expires. The alert triggers when the license is valid and 90 or fewer days remain.

Metric Attributes:

Attribute Name Description
service.name Emitting service (Relativity_Server_IdentityService)
host.name Host that emitted the license check
labels.relsvr_idsvr_license_valid Whether the Duende IdentityServer license is valid
numeric_labels.relsvr_idsvr_license_days_remaining Number of days until the license expires
Feedback