agent icon indicating copy to clipboard operation
agent copied to clipboard

Agent will fail to start if windows_events.bookmark_path file is truncated

Open nazar554 opened this issue 2 years ago • 10 comments

I'm using windows_events together with bookmark_path to gather Event logs on Windows. If the host system is shut down incorrectly (power outage, BSOD, etc...), the bookmark.xml file can get truncated. Because it's invalid Grafana Agent service will fail to start until I remove the file manually.

Can the agent flush the bookmark file to disk from time to time? Or use a SQLite db instead of an .xml file? And is there a workaround to ignore truncated/corrupted bookmarks during startup?

nazar554 avatar Nov 22 '22 12:11 nazar554