Xymon Mailing List Archive search

hobbitd warning: Cookie xxxxxx not found, dropping ack

5 messages in this thread

list Dominique Frise · Mon, 12 Jun 2006 07:42:32 +0200 ·
Hi,

Passed a certain time, alerts cannot be acked.
What is the value for this period and is it configurable?

Thanks.

Dominique
UNIL - University of Lausanne
list Henrik Størner · Mon, 12 Jun 2006 07:46:38 +0200 ·
On Mon, Jun 12, 2006 at 07:42:32AM +0200, Dominique Frise wrote:
Passed a certain time, alerts cannot be acked.
They can, but you'll need a new cookie.
What is the value for this period and is it configurable?
24 hours, not configurable.


Regards,
Henrik
list Dominique Frise · Mon, 12 Jun 2006 08:20:42 +0200 ·
quoted from Henrik Størner
Henrik Stoerner wrote:
On Mon, Jun 12, 2006 at 07:42:32AM +0200, Dominique Frise wrote:
Passed a certain time, alerts cannot be acked.

They can, but you'll need a new cookie.

What is the value for this period and is it configurable?

24 hours, not configurable.


Regards,
Henrik

Thanks.
Then there may be a problem.

We got a red alert for sslcert checking at 03:02 AM (CEST) this morning.

-------notifications.log-------
Mon Jun 12 03:02:41 2006 iris.sslcert (130.223.27.23) user-e51cd69fb09c@xymon.invalid[256] 
1150074161 0

-----alert e-mail-----------
...
Date: Mon, 12 Jun 2006 03:02:41 +0200 (CEST)
From: user-52bcd327094e@xymon.invalid
Message-Id: <user-e56baf2ed1a2@xymon.invalid>
To: user-e51cd69fb09c@xymon.invalid
Subject: Hobbit [868419] iris:sslcert CRITICAL (RED)
X-Server: High Performance Mail Server - http://surgemail.com rr=1842614
Content-Length: 412
Status: RO
X-Status: DA
X-Keywords:
X-UID: 92708

red Mon Jun 12 03:02:25 2006

&red SSL certificate for https://wwwexp/ expires in 9 days

...


We tried then to acknowledge it -reply- at 07:38 AM and get a warning from hobbitd"

----hobbitd.log----
2006-06-12 07:26:25 Cookie 868419 not found, dropping ack

Dominique
UNIL - University of Lausanne
list John Glowacki · Mon, 12 Jun 2006 07:08:53 -0400 ·
quoted from Dominique Frise
Dominique Frise wrote:
Henrik Stoerner wrote:
On Mon, Jun 12, 2006 at 07:42:32AM +0200, Dominique Frise wrote:
Passed a certain time, alerts cannot be acked.

They can, but you'll need a new cookie.

What is the value for this period and is it configurable?

24 hours, not configurable.


Regards,
Henrik

Thanks.
Then there may be a problem.

We got a red alert for sslcert checking at 03:02 AM (CEST) this morning.

-------notifications.log-------
Mon Jun 12 03:02:41 2006 iris.sslcert (130.223.27.23) 
user-e51cd69fb09c@xymon.invalid[256] 1150074161 0

-----alert e-mail-----------
...
Date: Mon, 12 Jun 2006 03:02:41 +0200 (CEST)
From: user-52bcd327094e@xymon.invalid
Message-Id: <user-e56baf2ed1a2@xymon.invalid>
To: user-e51cd69fb09c@xymon.invalid
Subject: Hobbit [868419] iris:sslcert CRITICAL (RED)
X-Server: High Performance Mail Server - http://surgemail.com rr=1842614
Content-Length: 412
Status: RO
X-Status: DA
X-Keywords:
X-UID: 92708

red Mon Jun 12 03:02:25 2006

&red SSL certificate for https://wwwexp/ expires in 9 days

...


We tried then to acknowledge it -reply- at 07:38 AM and get a warning 
from hobbitd"

----hobbitd.log----
2006-06-12 07:26:25 Cookie 868419 not found, dropping ack

Dominique
UNIL - University of Lausanne

You can run hobbitboard to see what is says now.
./bb 127.0.0.1 "hobbitdboard fields=hostname,color,cookie"
list Dominique Frise · Mon, 12 Jun 2006 13:38:36 +0200 ·
quoted from John Glowacki
John Glowacki wrote:
Dominique Frise wrote:
Henrik Stoerner wrote:
On Mon, Jun 12, 2006 at 07:42:32AM +0200, Dominique Frise wrote:
Passed a certain time, alerts cannot be acked.

They can, but you'll need a new cookie.

What is the value for this period and is it configurable?

24 hours, not configurable.


Regards,
Henrik

Thanks.
Then there may be a problem.

We got a red alert for sslcert checking at 03:02 AM (CEST) this morning.

-------notifications.log-------
Mon Jun 12 03:02:41 2006 iris.sslcert (130.223.27.23) 
user-e51cd69fb09c@xymon.invalid[256] 1150074161 0

-----alert e-mail-----------
...
Date: Mon, 12 Jun 2006 03:02:41 +0200 (CEST)
From: user-52bcd327094e@xymon.invalid
Message-Id: <user-e56baf2ed1a2@xymon.invalid>
To: user-e51cd69fb09c@xymon.invalid
Subject: Hobbit [868419] iris:sslcert CRITICAL (RED)
X-Server: High Performance Mail Server - http://surgemail.com rr=1842614
Content-Length: 412
Status: RO
X-Status: DA
X-Keywords:
X-UID: 92708

red Mon Jun 12 03:02:25 2006

&red SSL certificate for https://wwwexp/ expires in 9 days

...


We tried then to acknowledge it -reply- at 07:38 AM and get a warning 
from hobbitd"

----hobbitd.log----
2006-06-12 07:26:25 Cookie 868419 not found, dropping ack

Dominique
UNIL - University of Lausanne

You can run hobbitboard to see what is says now.
./bb 127.0.0.1 "hobbitdboard fields=hostname,color,cookie"
Thanks John for this info.
The cookie had changed (now 265629) and I could acknowledge it.
Still does not know why it changed before the 24 hours period ;-)

./bb 127.0.0.1 "hobbitdboard color=red test=sslcert 
fields=hostname,color,cookie,lastchange"
iris|red|265629|1150074161

Dominique
UNIL - University of Lausanne