You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
This issue was initially described in #956 but isolated to a separate ticket for discussion/triage.
The ES syslog "dump" and "clear" are separate commands, so there is a window of opportunity between these actions where messages can be lost - as it is not possible to guarantee that no additional messages were written during this time.
To Reproduce
Log messages are written
Dump command issued
More log messages are written
Clear command issued.
Logs written in (3) above are lost, as they are not in the dump file but they will be cleared by the clear command.
Expected behavior
Should have command structure which can ensure that no messages get lost.
Reporter Info
Joseph Hickey, Vantage Systems, Inc., generalized from comment at #956 (comment)
The text was updated successfully, but these errors were encountered:
I would recommend one of the following:
a. A shadow copy taken prior to Dump, and all writing occurs on the other copy. This would be not need locking if the index was word sized.
b. Use the implementation for #956 instead of ReadStart.
Locking from ReadStart through to the Clear could block the entire system making it a nexus to stall the whole system (bad).
Describe the bug
This issue was initially described in #956 but isolated to a separate ticket for discussion/triage.
The ES syslog "dump" and "clear" are separate commands, so there is a window of opportunity between these actions where messages can be lost - as it is not possible to guarantee that no additional messages were written during this time.
To Reproduce
Logs written in (3) above are lost, as they are not in the dump file but they will be cleared by the clear command.
Expected behavior
Should have command structure which can ensure that no messages get lost.
Reporter Info
Joseph Hickey, Vantage Systems, Inc., generalized from comment at #956 (comment)
The text was updated successfully, but these errors were encountered: