AC:

backend submits event to notifications service when the criteria described below is met:

• • WHEN An account has an “All RHEL” socket usage value greater than their account’s socket capacity value AND
  • An account owns SKU MCT3718 AND
  • An account owns a subscription providing RHEL and bearing the attribute “virt-limit > 0”
  • no extra context needed, "event_type": "overage-virt-who-customer",

As a customer who is not submitting virt-who data, I wish to be warned/informed that I SHOULD be submitting such data.  If I am not, I may be alarmed at perceived overuse of RHEL and open support tickets or contact my account team to ask about the issue.