datalust / seq-tickets

Issues, design discussions and feature roadmap for the Seq log server
https://datalust.co/seq
96 stars 5 forks source link

Manual deletes may delete more or less data than requested #2225

Closed KodrAus closed 2 months ago

KodrAus commented 2 months ago

A bug in the processing of manual deletes (from Settings > Retention > Manually delete events) can cause them to improperly delete more or less data than the filter specifies if the manual delete operates over a time window and the start of that time window partially intersects a file on disk.

For very small ranges, this may delete no data instead of processing the delete normally. For large ranges, this may delete the entirety of that first intersected file instead of processing the delete normally. After this first file the rest of the delete will process normally.

Retention policies and manual deletes that don't operate on time ranges are unaffected.

The bug was first introduced in 2023.1.8829