mirror of
https://github.com/zeek/zeek.git
synced 2025-10-03 23:28:20 +00:00
![]() This helps prevent a node from being killed/crashing in the middle of writing a log, restarting, and eventually clobbering that log file that never underwent the rotation/archival process. The old `archive-log` and `post-terminate` scripts as used by ZeekControl previously implemented this behavior, but the new logic is entirely in the ASCII writer. It uses ".shadow" log files stored alongside the real log to help detect such scenarios and rotate them correctly upon the next startup of the Zeek process. |
||
---|---|---|
.. | ||
test.default.log | ||
test.postproc.log | ||
zeek.logger-1.postproc.out |