search

driskell / log-courier

The Log Courier Suite is a set of lightweight tools created to ship and process log files speedily and securely, with low resource usage, to Elasticsearch or Logstash instances.
Other
419 stars 107 forks source link

Hold time setting not closing files properly #382

Closed driskell closed 3 years ago

driskell commented 3 years ago

DATA LOST: Stopping harvest of /var/log/audit/audit.log; file was deleted

Reappears every 10 seconds when connection is broken permanently. It should only appear once. File may not be being closed properly.