zeekctl
zeekctl copied to clipboard
Multi-logger configuration causes data-loss on log rotation
When running with multiple loggers and the ASCII writer, logs are rotated into the same destination directory without a discriminator, causing data loss.
- Tag the logger node name onto the log name before running the log postprocessing to avoid the data-loss.
- Document
The bigger topic is here #zeek/zeek#2728.