Skip to content

[UniversalForwarder 9.2.1] SPLUNK_TAIL_FILE env var does not consider log file rotation #863

@flyattimes

Description

@flyattimes

We are using the SPLUNK_TAIL_FILE envvar to redirect splunkd.log content to stdout.

When splunkd.log is rotated to splunkd.log.1, the handle of SPLUNK_TAIL_FILE remains with splunkd.log.1 which means that no more logs are visible.
When the log file is rotated, the handle should be released and assigned to the newly created splunkd.log

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions