zeekctl icon indicating copy to clipboard operation
zeekctl copied to clipboard

Multi-logger configuration causes data-loss on log rotation

Open awelzel opened this issue 1 year ago • 0 comments

When running with multiple loggers and the ASCII writer, logs are rotated into the same destination directory without a discriminator, causing data loss.

  • Tag the logger node name onto the log name before running the log postprocessing to avoid the data-loss.
  • Document

The bigger topic is here #zeek/zeek#2728.

awelzel avatar Apr 05 '23 08:04 awelzel