hobbitd warning: Cookie xxxxxx not found, dropping ack

John Glowacki wrote:

Dominique Frise wrote:

Henrik Stoerner wrote:

On Mon, Jun 12, 2006 at 07:42:32AM +0200, Dominique Frise wrote:

Passed a certain time, alerts cannot be acked.

They can, but you'll need a new cookie.

What is the value for this period and is it configurable?

24 hours, not configurable.


Regards,
Henrik

Thanks.
Then there may be a problem.

We got a red alert for sslcert checking at 03:02 AM (CEST) this morning.

-------notifications.log-------
Mon Jun 12 03:02:41 2006 iris.sslcert (130.223.27.23) 
user-e51cd69fb09c@xymon.invalid[256] 1150074161 0

-----alert e-mail-----------
...
Date: Mon, 12 Jun 2006 03:02:41 +0200 (CEST)
From: user-52bcd327094e@xymon.invalid
Message-Id: <user-e56baf2ed1a2@xymon.invalid>
To: user-e51cd69fb09c@xymon.invalid
Subject: Hobbit [868419] iris:sslcert CRITICAL (RED)
X-Server: High Performance Mail Server - http://surgemail.com rr=1842614
Content-Length: 412
Status: RO
X-Status: DA
X-Keywords:
X-UID: 92708

red Mon Jun 12 03:02:25 2006

&red SSL certificate for https://wwwexp/ expires in 9 days

...


We tried then to acknowledge it -reply- at 07:38 AM and get a warning 
from hobbitd"

----hobbitd.log----
2006-06-12 07:26:25 Cookie 868419 not found, dropping ack

Dominique
UNIL - University of Lausanne

You can run hobbitboard to see what is says now.
./bb 127.0.0.1 "hobbitdboard fields=hostname,color,cookie"

Thanks John for this info.
The cookie had changed (now 265629) and I could acknowledge it.
Still does not know why it changed before the 24 hours period ;-)

./bb 127.0.0.1 "hobbitdboard color=red test=sslcert 
fields=hostname,color,cookie,lastchange"
iris|red|265629|1150074161

Dominique
UNIL - University of Lausanne