You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 25, 2022. It is now read-only.
Request metadata from Windows Events pertaining to the event in step 1.
Step 2 can fail if the event is old enough, this will produce an error like this:
Failed to open publisher: failed to open publisher handle: The system cannot find the file specified."
This error indicates a failure and does not mention that the event will still be processed in the pipeline, just without metadata. It would be nice if the error included information like "writing log entry to pipeline without metadata".
publisher:=NewPublisher()
iferr:=publisher.Open(simpleEvent.Provider.Name); err!=nil {
// error is produced heree.Errorf("Failed to open publisher: %s")
// event is written to the pipeline heree.sendEvent(ctx, simpleEvent)
return
}
deferpublisher.Close()
Windows event log input has two stages
Step 2 can fail if the event is old enough, this will produce an error like this:
This error indicates a failure and does not mention that the event will still be processed in the pipeline, just without metadata. It would be nice if the error included information like "writing log entry to pipeline without metadata".
See https://github.com/open-telemetry/opentelemetry-log-collection/blob/main/operator/builtin/input/windows/operator.go#L204
This error is easily re-produced on windows systems with old events using the
start_at: beginning
parameter.The text was updated successfully, but these errors were encountered: