Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

windows_eventlog2 pos temp files orphaned #102

Closed
sutyak opened this issue Nov 14, 2023 · 2 comments
Closed

windows_eventlog2 pos temp files orphaned #102

sutyak opened this issue Nov 14, 2023 · 2 comments

Comments

@sutyak
Copy link

sutyak commented Nov 14, 2023

A related issue can be found here: #57

Hopefully this provides more detail and how to reproduce the issue.

Fluentd version 1.16.1

Describe the bug
If the position file is opened by another process, such as an antivirus utility, then the temporary files generated during that time are abandoned and continue to be produced and never cleaned up. Using read all channels this has produced hundreds of thousands of temporary position files that are abandoned.
Presumably this is leading to duplicate logs being read and forwarded to the endpoint due to the index not being incremented properly, but have not verifiled this.

281917002-5c833dd8-1ee6-45f3-b9f7-0bfa2118a07b

To Reproduce
The simplest way to reproduce this is to have Notepad lock the file by running from a command prompt:
Notepad >> winevt.json

As long as Fluentd is running the temp files will continue to be orphaned until Notepad is closed. Even after Notepad is closed Fluentd does not clean up the files.

Expected behavior
Expected behavior is for Fluentd to retry updating the pos file if it is locked by an AV process, and delete abandoned POS temp files once successful.

Configuration:

<source>
  @type windows_eventlog2
  @id windows_eventlog2
  read_all_channels true
  preserve_qualifiers_on_hash true
  read_existing_events
  read_interval 10
  tag winevt.raw
  render_as_xml false
  rate_limit 2000
  #path_key tailed_path  #not a valid setting for an event log
  @log_level debug
  <storage>
    @type local
    persistent true
    path "FLUENTDPATH/pos/winevt.json"
  </storage>
</source>

Fluentd Log (abbreviated)

2023-11-09 07:51:47 -0500 [debug]: #0 Created new chunk chunk_id="609b7aaa7b816cb01587977c39aad7f3" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=4>
2023-11-09 07:51:47 -0500 [debug]: #0 Created new chunk chunk_id="609b7aaa7cebc7a11fd513e0a110e39b" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=5>
2023-11-09 07:51:47 -0500 [debug]: #0 Created new chunk chunk_id="609b7aaa7ea2130545a1c83ecc706348" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=6>
2023-11-09 07:51:47 -0500 [debug]: #0 Created new chunk chunk_id="609b7aaa800ad51868d3b38477f00834" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=7>
2023-11-09 07:51:47 -0500 [debug]: #0 Created new chunk chunk_id="609b7aaa817ef346bbd73b6db3105bdf" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=8>
2023-11-09 07:51:47 -0500 [debug]: #0 Created new chunk chunk_id="609b7aaa8336205685b6c0f316fa0412" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=9>
2023-11-09 07:51:47 -0500 [debug]: #0 Created new chunk chunk_id="609b7aaa863c99c301f24d639c2a6ad9" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=10>
2023-11-09 07:51:47 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7a9f36029ad9959d6e36fe60cfe6)
2023-11-09 07:51:47 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa63ca854cee973a31cc676851)
2023-11-09 07:51:47 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa65a62f13c542f6b1307d78ab)
2023-11-09 07:51:47 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa79a329267fcbbc8b30f8d6a2)
2023-11-09 07:51:47 -0500 [debug]: #0 200 OK1220
2023-11-09 07:51:47 -0500 [debug]: #0 200 OK1520
2023-11-09 07:51:47 -0500 [debug]: #0 200 OK1536
2023-11-09 07:51:48 -0500 [debug]: #0 200 OK1600
2023-11-09 07:51:48 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa7b816cb01587977c39aad7f3)
2023-11-09 07:51:48 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa7cebc7a11fd513e0a110e39b)
2023-11-09 07:51:48 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa7ea2130545a1c83ecc706348)
2023-11-09 07:51:49 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa800ad51868d3b38477f00834)
2023-11-09 07:51:49 -0500 [debug]: #0 200 OK1552
2023-11-09 07:51:49 -0500 [debug]: #0 200 OK1664
2023-11-09 07:51:49 -0500 [debug]: #0 200 OK1584
2023-11-09 07:51:49 -0500 [debug]: #0 200 OK1648
2023-11-09 07:51:50 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa817ef346bbd73b6db3105bdf)
2023-11-09 07:51:50 -0500 [debug]: #0 200 OK1824
2023-11-09 07:51:50 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa8336205685b6c0f316fa0412)
2023-11-09 07:51:50 -0500 [debug]: #0 Created new chunk chunk_id="609b7aae125dfc93665a6853d0e08424" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:51:50 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaa863c99c301f24d639c2a6ad9)
2023-11-09 07:51:51 -0500 [debug]: #0 200 OK1616
2023-11-09 07:51:51 -0500 [debug]: #0 200 OK1915
2023-11-09 07:51:52 -0500 [debug]: #0 Created new chunk chunk_id="609b7aaf9a6903d2b45040368e031de1" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:51:52 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aae125dfc93665a6853d0e08424)
2023-11-09 07:51:52 -0500 [debug]: #0 200 OK2362
2023-11-09 07:51:53 -0500 [debug]: #0 Created new chunk chunk_id="609b7ab0f8b808847f6d7d9b5532c385" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:51:53 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7aaf9a6903d2b45040368e031de1)
2023-11-09 07:51:54 -0500 [debug]: #0 200 OK1166
2023-11-09 07:51:55 -0500 [debug]: #0 Created new chunk chunk_id="609b7ab23349cfa6306b2f49b8ffc3ab" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:51:55 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ab0f8b808847f6d7d9b5532c385)
2023-11-09 07:51:55 -0500 [debug]: #0 200 OK396
2023-11-09 07:51:57 -0500 [debug]: #0 Created new chunk chunk_id="609b7ab42d4e613f7acc3ffb7b068ad9" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:51:57 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ab23349cfa6306b2f49b8ffc3ab)
2023-11-09 07:51:57 -0500 [debug]: #0 200 OK2274
2023-11-09 07:51:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7ab6356db07c74407fbe9bc806d6" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:51:59 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ab42d4e613f7acc3ffb7b068ad9)
2023-11-09 07:51:59 -0500 [debug]: #0 200 OK2764
2023-11-09 07:52:06 -0500 [debug]: #0 Created new chunk chunk_id="609b7abcdeec2703ea8d54250db1403f" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:52:06 -0500 [debug]: #0 Created new chunk chunk_id="609b7abce049c14a53bb1c8fe76c4f0a" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=2>
2023-11-09 07:52:06 -0500 [debug]: #0 Created new chunk chunk_id="609b7abce1db681bbfdf1ac9d257b0d4" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=3>
2023-11-09 07:52:06 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ab6356db07c74407fbe9bc806d6)
2023-11-09 07:52:06 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7abcdeec2703ea8d54250db1403f)
2023-11-09 07:52:06 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7abce049c14a53bb1c8fe76c4f0a)
2023-11-09 07:52:07 -0500 [debug]: #0 200 OK3481
2023-11-09 07:52:07 -0500 [debug]: #0 200 OK3744
2023-11-09 07:52:07 -0500 [debug]: #0 200 OK3744
2023-11-09 07:52:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7ac7b4c0c86f84bac9243b674917" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:52:17 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7abce1db681bbfdf1ac9d257b0d4)
2023-11-09 07:52:18 -0500 [debug]: #0 200 OK2754
2023-11-09 07:52:52 -0500 [debug]: #0 Created new chunk chunk_id="609b7ae88e181fcb1b24a45e4540e970" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:52:52 -0500 [debug]: #0 Created new chunk chunk_id="609b7ae88f8c471e6bb2c01c22fb404d" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=2>
2023-11-09 07:52:52 -0500 [debug]: #0 Created new chunk chunk_id="609b7ae89b40b4c45ede8d9f4fc3efe2" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=3>
2023-11-09 07:52:52 -0500 [debug]: #0 Created new chunk chunk_id="609b7ae8b0ca2183f049129d3386190e" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=4>
2023-11-09 07:52:52 -0500 [debug]: #0 Created new chunk chunk_id="609b7ae8b23af30f9aa2c8b1688dc96a" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=5>
2023-11-09 07:52:52 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ac7b4c0c86f84bac9243b674917)
2023-11-09 07:52:52 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ae88e181fcb1b24a45e4540e970)
2023-11-09 07:52:52 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ae88f8c471e6bb2c01c22fb404d)
2023-11-09 07:52:53 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ae89b40b4c45ede8d9f4fc3efe2)
2023-11-09 07:53:01 -0500 [debug]: #0 200 OK2300
2023-11-09 07:53:01 -0500 [debug]: #0 200 OK2541
2023-11-09 07:53:02 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ae8b0ca2183f049129d3386190e)
2023-11-09 07:53:03 -0500 [debug]: #0 200 OK2662
2023-11-09 07:53:03 -0500 [debug]: #0 200 OK2662
2023-11-09 07:53:08 -0500 [debug]: #0 200 OK2541
2023-11-09 07:53:26 -0500 [debug]: #0 Created new chunk chunk_id="609b7b08e6ba0b22834fb8dd6707e7c9" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:26 -0500 [debug]: #0 Created new chunk chunk_id="609b7b08eacf26fa4dd819b33adcc0e0" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:26 -0500 [debug]: #0 Created new chunk chunk_id="609b7b08ec20705011f8f927181fef11" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=2>
2023-11-09 07:53:26 -0500 [debug]: #0 Created new chunk chunk_id="609b7b08eda109c704a0f4d16bb0bcc2" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=3>
2023-11-09 07:53:26 -0500 [debug]: #0 Created new chunk chunk_id="609b7b08ef1753663120608f69361222" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=4>
2023-11-09 07:53:26 -0500 [debug]: #0 Created new chunk chunk_id="609b7b08f062f8508a449c635c6cae0f" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=5>
2023-11-09 07:53:26 -0500 [debug]: #0 Created new chunk chunk_id="609b7b08f1e630b7d7d6f37627203157" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=6>
2023-11-09 07:53:26 -0500 [debug]: #0 Created new chunk chunk_id="609b7b08f347fbab924b4e24941f6307" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=7>
2023-11-09 07:53:26 -0500 [debug]: #0 Created new chunk chunk_id="609b7b08f4ba5a8b031825545ead6945" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=8>
2023-11-09 07:53:26 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7ae8b23af30f9aa2c8b1688dc96a)
2023-11-09 07:53:26 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b08eacf26fa4dd819b33adcc0e0)
2023-11-09 07:53:26 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b08ec20705011f8f927181fef11)
2023-11-09 07:53:26 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b08eda109c704a0f4d16bb0bcc2)
2023-11-09 07:53:26 -0500 [debug]: #0 200 OK2273
2023-11-09 07:53:26 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b08ef1753663120608f69361222)
2023-11-09 07:53:27 -0500 [debug]: #0 200 OK2176
2023-11-09 07:53:27 -0500 [debug]: #0 200 OK2091
2023-11-09 07:53:27 -0500 [debug]: #0 200 OK1972
2023-11-09 07:53:27 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b08f062f8508a449c635c6cae0f)
2023-11-09 07:53:27 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b08f1e630b7d7d6f37627203157)
2023-11-09 07:53:27 -0500 [debug]: #0 200 OK1955
2023-11-09 07:53:28 -0500 [debug]: #0 200 OK2091
2023-11-09 07:53:28 -0500 [debug]: #0 200 OK2006
2023-11-09 07:53:28 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b08f347fbab924b4e24941f6307)
2023-11-09 07:53:28 -0500 [debug]: #0 200 OK2074
2023-11-09 07:53:32 -0500 [debug]: #0 Created new chunk chunk_id="609b7b0e93a85c003c3022b7efe5934e" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:32 -0500 [debug]: #0 Created new chunk chunk_id="609b7b0e94ac53eacff6e540d6b31613" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=2>
2023-11-09 07:53:32 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b08f4ba5a8b031825545ead6945)
2023-11-09 07:53:32 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b0e93a85c003c3022b7efe5934e)
2023-11-09 07:53:32 -0500 [debug]: #0 200 OK2811
2023-11-09 07:53:33 -0500 [debug]: #0 200 OK3885
2023-11-09 07:53:34 -0500 [debug]: #0 Created new chunk chunk_id="609b7b11653ecb8f403a5a5634aba7bb" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:34 -0500 [debug]: #0 Created new chunk chunk_id="609b7b1166133edb7b37f8f5e071dd5a" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=2>
2023-11-09 07:53:34 -0500 [debug]: #0 Created new chunk chunk_id="609b7b116a4a87acdef4199331029273" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=3>
2023-11-09 07:53:34 -0500 [debug]: #0 Created new chunk chunk_id="609b7b116b2dde63330f12499ea7c44b" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=4>
2023-11-09 07:53:35 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b0e94ac53eacff6e540d6b31613)
2023-11-09 07:53:35 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b11653ecb8f403a5a5634aba7bb)
2023-11-09 07:53:35 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b1166133edb7b37f8f5e071dd5a)
2023-11-09 07:53:35 -0500 [debug]: #0 200 OK2749
2023-11-09 07:53:35 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b116a4a87acdef4199331029273)
2023-11-09 07:53:35 -0500 [debug]: #0 200 OK1140
2023-11-09 07:53:36 -0500 [debug]: #0 200 OK1064
2023-11-09 07:53:36 -0500 [debug]: #0 200 OK1102
2023-11-09 07:53:37 -0500 [debug]: #0 Created new chunk chunk_id="609b7b1416bb5ab40cb2deef9b7de42f" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:37 -0500 [debug]: #0 Created new chunk chunk_id="609b7b1417eb8c5273c60f59f9b54874" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=2>
2023-11-09 07:53:37 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b116b2dde63330f12499ea7c44b)
2023-11-09 07:53:37 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b1416bb5ab40cb2deef9b7de42f)
2023-11-09 07:53:38 -0500 [debug]: #0 200 OK2472
2023-11-09 07:53:38 -0500 [debug]: #0 200 OK2601
2023-11-09 07:53:42 -0500 [debug]: #0 Created new chunk chunk_id="609b7b1901e0bf6daf82dffbe7ceb373" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:42 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b1417eb8c5273c60f59f9b54874)
2023-11-09 07:53:43 -0500 [debug]: #0 200 OK1755
2023-11-09 07:53:44 -0500 [debug]: #0 Created new chunk chunk_id="609b7b1aae9d2b27f734acd1d28d7675" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:44 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b1901e0bf6daf82dffbe7ceb373)
2023-11-09 07:53:45 -0500 [debug]: #0 200 OK2625
2023-11-09 07:53:46 -0500 [debug]: #0 Created new chunk chunk_id="609b7b1c054c04dac15ac92f38718873" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:46 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b1aae9d2b27f734acd1d28d7675)
2023-11-09 07:53:46 -0500 [debug]: #0 200 OK1563
2023-11-09 07:53:47 -0500 [debug]: #0 Created new chunk chunk_id="609b7b1d979709f2a4c9b26d0a1d9b6c" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:47 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b1c054c04dac15ac92f38718873)
2023-11-09 07:53:47 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b1d979709f2a4c9b26d0a1d9b6c)
2023-11-09 07:53:48 -0500 [debug]: #0 200 OK1740
2023-11-09 07:53:48 -0500 [debug]: #0 200 OK2583
2023-11-09 07:53:50 -0500 [debug]: #0 Created new chunk chunk_id="609b7b20779ec1e1a76e284ac7428e6a" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=0>
2023-11-09 07:53:55 -0500 [debug]: #0 Created new chunk chunk_id="609b7b25634d708f6b7a6de7b9506595" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:53:55 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b20779ec1e1a76e284ac7428e6a)
2023-11-09 07:53:56 -0500 [debug]: #0 200 OK1981
2023-11-09 07:54:56 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b25634d708f6b7a6de7b9506595)
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b619662f4a3b5056c0879d24579" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=0>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61b6fdd79f41593981dc02d907" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61b7c5227710596e749b3b4425" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=2>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61b87bc325b1eadd03117ddfc5" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=3>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61b9352fbe3918cb64659b821f" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=4>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61ba4714e51ae856e5683b66fa" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=5>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61bb740f2726b31d0ab747331c" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=6>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61bcac51bd962e4004ab25473b" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=7>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61bdd25c5fc205680c01a0d4d4" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=8>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61bf1883e0d734afd0b8c780c6" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=9>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61c02fd2adab84ed72e62f3863" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=10>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61c15720da6a19b0e4b60797a2" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=11>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61c2afcff7e7754101aca42a03" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=12>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61c659881e22d8fe379a9c250c" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=13>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61c724379158c5810cc4b5ac72" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=14>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61c809cb3cbc4a3f64bc583467" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=15>
2023-11-09 07:54:59 -0500 [debug]: #0 Created new chunk chunk_id="609b7b61c9881b1d2705ff8828a1bd28" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=16>
2023-11-09 07:54:59 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b619662f4a3b5056c0879d24579)
2023-11-09 07:54:59 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61b6fdd79f41593981dc02d907)
2023-11-09 07:54:59 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61b7c5227710596e749b3b4425)
2023-11-09 07:55:13 -0500 [debug]: #0 200 OK1157
2023-11-09 07:55:13 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61b87bc325b1eadd03117ddfc5)
2023-11-09 07:55:14 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:14 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61b9352fbe3918cb64659b821f)
2023-11-09 07:55:17 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:17 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:17 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61ba4714e51ae856e5683b66fa)
2023-11-09 07:55:17 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61bb740f2726b31d0ab747331c)
2023-11-09 07:55:18 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:18 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61bcac51bd962e4004ab25473b)
2023-11-09 07:55:18 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:18 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61bdd25c5fc205680c01a0d4d4)
2023-11-09 07:55:18 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:19 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61bf1883e0d734afd0b8c780c6)
2023-11-09 07:55:19 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:19 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61c02fd2adab84ed72e62f3863)
2023-11-09 07:55:19 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:19 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:19 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61c15720da6a19b0e4b60797a2)
2023-11-09 07:55:19 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61c2afcff7e7754101aca42a03)
2023-11-09 07:55:20 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:20 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61c659881e22d8fe379a9c250c)
2023-11-09 07:55:20 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:20 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:20 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61c724379158c5810cc4b5ac72)
2023-11-09 07:55:20 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61c809cb3cbc4a3f64bc583467)
2023-11-09 07:55:20 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:20 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:21 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:21 -0500 [debug]: #0 200 OK2598
2023-11-09 07:55:22 -0500 [debug]: #0 Created new chunk chunk_id="609b7b77b96408b0a00d60f047df7870" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:55:22 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b61c9881b1d2705ff8828a1bd28)
2023-11-09 07:55:22 -0500 [debug]: #0 200 OK2446
2023-11-09 07:55:24 -0500 [debug]: #0 Created new chunk chunk_id="609b7b7a1cdae7cb7f64e040d9b58e6a" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:55:24 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b77b96408b0a00d60f047df7870)
2023-11-09 07:55:25 -0500 [debug]: #0 200 OK2560
2023-11-09 07:55:41 -0500 [debug]: #0 Created new chunk chunk_id="609b7b8a5ee47e447110b094abd6cbba" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:55:41 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b7a1cdae7cb7f64e040d9b58e6a)
2023-11-09 07:55:42 -0500 [debug]: #0 200 OK2495
2023-11-09 07:56:46 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7b8a5ee47e447110b094abd6cbba)
2023-11-09 07:56:55 -0500 [debug]: #0 200 OK2464
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be590187eeaa262483d748db509" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=0>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5b5af8bac08d9e5ae3623b60f" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5b7b510d9da242255176764f0" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=2>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5b9c5bee387631fb7a45c2018" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=3>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5bbfbbac0618851430bdddcd7" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=4>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5be59e74ef9b954313d869db6" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=5>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5bfba51a612eaff6718ad756d" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=6>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5c141d57bd957b5626d5fe3c8" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=7>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5c4d25b83723306cc3ae8a667" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=8>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5c6180fbc3ffefc12554a40ab" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=9>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5c73e8faf14f205df9acd63ab" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=10>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5c8f58c5816dd99d30237072d" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=11>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5cab2a36a5500ace7b9520fa6" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=12>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5cca15d5bd3c41095fe42a1bc" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=13>
2023-11-09 07:57:17 -0500 [debug]: #0 Created new chunk chunk_id="609b7be5ce20399868cbeae8020b7406" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=14>
2023-11-09 07:57:17 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be590187eeaa262483d748db509)
2023-11-09 07:57:17 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5b5af8bac08d9e5ae3623b60f)
2023-11-09 07:57:17 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5b7b510d9da242255176764f0)
2023-11-09 07:57:18 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5b9c5bee387631fb7a45c2018)
2023-11-09 07:57:18 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:18 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5bbfbbac0618851430bdddcd7)
2023-11-09 07:57:18 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:19 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5be59e74ef9b954313d869db6)
2023-11-09 07:57:19 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:19 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5bfba51a612eaff6718ad756d)
2023-11-09 07:57:19 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:19 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:20 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5c141d57bd957b5626d5fe3c8)
2023-11-09 07:57:20 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5c4d25b83723306cc3ae8a667)
2023-11-09 07:57:20 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:20 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:20 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5c6180fbc3ffefc12554a40ab)
2023-11-09 07:57:20 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5c73e8faf14f205df9acd63ab)
2023-11-09 07:57:21 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:21 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:21 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5c8f58c5816dd99d30237072d)
2023-11-09 07:57:21 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5cab2a36a5500ace7b9520fa6)
2023-11-09 07:57:22 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:22 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:22 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5cca15d5bd3c41095fe42a1bc)
2023-11-09 07:57:22 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:22 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:23 -0500 [debug]: #0 200 OK2592
2023-11-09 07:57:32 -0500 [debug]: #0 Created new chunk chunk_id="609b7bf45e7e1a61dec2e5a9b4f1d3ad" metadata=#<struct Fluent::Plugin::Buffer::Metadata timekey=nil, tag=nil, variables=nil, seq=1>
2023-11-09 07:57:32 -0500 [debug]: #0 Post data to https://ENDPOINT_NAME with chunk(609b7be5ce20399868cbeae8020b7406)
2023-11-09 07:57:33 -0500 [debug]: #0 200 OK2477
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0882cfb7ac9931d58bc44ec96a" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0882cfb7ac9931d58bc44ec96a, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c088b4dbe9ebe1e43f2af700290" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c088b4dbe9ebe1e43f2af700290, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c08d22fffbcc96445eec379f6c8" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c08d22fffbcc96445eec379f6c8, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c08f3b0f8ee4f1a5cac33e638b8" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c08f3b0f8ee4f1a5cac33e638b8, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0909426c3ef5a47780eb29a6fc" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0909426c3ef5a47780eb29a6fc, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c090bf820a31775d7c49e210e3d" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c090bf820a31775d7c49e210e3d, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c090e02821fac9763baa048e319" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c090e02821fac9763baa048e319, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0910cde57e7153da1a8b9fb71f" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0910cde57e7153da1a8b9fb71f, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c092b6b3b5344da24c422317ca6" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c092b6b3b5344da24c422317ca6, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c092d48e41881c51ecd380c1935" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c092d48e41881c51ecd380c1935, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c092fe5b303e8425d328b1e3865" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c092fe5b303e8425d328b1e3865, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c093ff93d5e8398054ba954e4ec" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c093ff93d5e8398054ba954e4ec, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0942dfb3e4812aa7b3783f372f" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0942dfb3e4812aa7b3783f372f, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c095f087a05746b28e401a4b1e3" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c095f087a05746b28e401a4b1e3, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0960c6ff4ce6bde0017c324710" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0960c6ff4ce6bde0017c324710, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:54 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09628366cc9e6f163be263e8df" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09628366cc9e6f163be263e8df, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09641760db6d769dcafc3ebe9a" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09641760db6d769dcafc3ebe9a, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0965fa9f8da636c884f49c9dd3" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0965fa9f8da636c884f49c9dd3, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0967dd59ac273f528e475ad6d1" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0967dd59ac273f528e475ad6d1, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09749654e9d35960e031a61bda" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09749654e9d35960e031a61bda, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0976f9dbf81ff2d5302e5812c4" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0976f9dbf81ff2d5302e5812c4, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c097c72936a0decbb6ffdaa8d96" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c097c72936a0decbb6ffdaa8d96, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0981c4564613b1b2d7429e9143" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0981c4564613b1b2d7429e9143, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09a428e7a0014e9c28f6fb5550" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09a428e7a0014e9c28f6fb5550, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09a83f67c0882a47b760b3c76d" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09a83f67c0882a47b760b3c76d, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09aa3c9faaf3820833c1ef52d3" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09aa3c9faaf3820833c1ef52d3, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09b5e589b7871f7f3f9ea7af22" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09b5e589b7871f7f3f9ea7af22, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09c6ca4f9a04a19d12acfa0f99" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09c6ca4f9a04a19d12acfa0f99, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09c8c24bb9aa6f72ae3696ecbb" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09c8c24bb9aa6f72ae3696ecbb, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09d0d2aa68440b9fc4178f1ba7" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09d0d2aa68440b9fc4178f1ba7, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09d2f54e8a5e63f2b7582cb684" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09d2f54e8a5e63f2b7582cb684, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09d48863dd77c12e25ca60389c" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09d48863dd77c12e25ca60389c, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09d6f472ee98630cec4f08714b" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09d6f472ee98630cec4f08714b, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09dabb946218353ad95d780d68" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09dabb946218353ad95d780d68, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09ec7dd3d12fa080c3504bfea2" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09ec7dd3d12fa080c3504bfea2, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09eec5504f80ad4c8d5b8afd66" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c09eec5504f80ad4c8d5b8afd66, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a1dcb393ee6d51e248fbf94f9" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a1dcb393ee6d51e248fbf94f9, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a2b8d059981d05f2f3f0bc6e2" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a2b8d059981d05f2f3f0bc6e2, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a2dae6d9f4984a016d308c9bc" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a2dae6d9f4984a016d308c9bc, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a2fee43b032c03e5610473b77" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a2fee43b032c03e5610473b77, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
2023-11-09 07:57:55 -0500 [error]: #0 [windows_eventlog2] failed to save data for plugin storage to file path="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json" tmp="C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a4b49d8c20b7cf703eedfd4d7" error_class=Errno::EACCES error="Permission denied @ rb_file_s_rename - (C:/Program Files/SubfolderName/Fluentd/pos/winevt.json.tmp.609b7c0a4b49d8c20b7cf703eedfd4d7, C:/Program Files/SubfolderName/Fluentd/pos/winevt.json)"
@ESH-Schroeder
Copy link

I´m facing the same issue on different servers

Windows Server

  • Windows Server 2016
  • Windows Server 2019

Fluentd

  • 1.16.1 via fluent-package-5.0.1-x64.msi (LTS Branch)
  • 1.16.3 via fluent-package-5.0.2-x64.msi (LTS Branch)

@daipom daipom mentioned this issue Jun 4, 2024
Closed
@daipom
Copy link
Contributor

daipom commented Jun 4, 2024

If an external process was opening the file, the update of the storage file would inevitably fail in this way.

It is not nice that the tmp files are left, but basically, it does not harm the operation.
(You can remove these orphaned tmp files if the update of the storage file succeeds in the end.)

The storage file is not loaded unless Fluentd is restarted or refresh_subscription_interval is performed.
If the update succeeds in the end, there will be no impact.

@daipom daipom closed this as completed Jun 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@daipom @ESH-Schroeder @sutyak