Skip to content
This repository has been archived by the owner on Dec 18, 2019. It is now read-only.

holding open handles on deleted files when logstash is down #2

Open
jordanorelli opened this issue Jan 29, 2015 · 1 comment
Open

Comments

@jordanorelli
Copy link

by design, lumberjack sometimes holds onto file handles of deleted files. This is so that we can continue shipping lines from a given file even after it has been deleted, if we haven't already shipped all of the lines.

also by design: if all logstash connections are down, lumberjack will automatically wait for them to come back online before continuing.

this means that if logstash has failed completely, and lumberjack can't ship anything, it'll just open file handles on log files as they are created, and never let go of them, potentially filling disks. The alternative of letting go of the file lets the OS reclaim its disk space, but at the cost of not shipping those lines. That appears to be an acceptable tradeoff.

@wjimenez5271
Copy link

Perhaps make it a configurable option in case some would rather not loose track of lines? Just an idea, I think in general it is a better tradeoff.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants