Close handle on signalEvent (#9838)

Close handle on signalEvent. Winlogbeat doesn't use the signalEvent but it's required to create the subscription. Winlogbeat polls the subscription every second rather than selecting on the signalEvent.
elastic · Jan 4, 2019 · 5b1e4cd · 5b1e4cd
1 parent 72b96a7
commit 5b1e4cd
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
@@ -122,6 +122,8 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 
 *Winlogbeat*
 
+- Close handle on signalEvent. {pull}9838[9838]
+
 *Functionbeat*
 
 ==== Known Issue

diff --git a/winlogbeat/eventlog/wineventlog.go b/winlogbeat/eventlog/wineventlog.go
@@ -126,6 +126,7 @@ func (l *winEventLog) Open(state checkpoint.EventLogState) error {
 	if err != nil {
 		return nil
 	}
+	defer windows.CloseHandle(signalEvent)
 
 	debugf("%s using subscription query=%s", l.logPrefix, l.query)
 	subscriptionHandle, err := win.Subscribe(