Version

Argent Advanced Technology 3.1A-1407-A or earlier

Date

Thursday, 18 Sep 2014

Summary

Argent for Compliance can be configured to monitor or archive log files on disk or network share

Some system may generate log files in such a way: instead of appending new log entries to end of log file, it overwrites the existing log file completely

If the log file size does not shrink, and log file size is small (< 1024 bytes), Argent for Compliance Engine may not recognize that the log file has already rolled over, and continue to read from last read position

As a result, no new log entries or only partial new entries will be retrieved

The issue has been addressed in Argent AT 3.1A-1407-T5

Technical Background

Argent AT 3.1A-1407-T5 has been enhanced using 64-bit CRC of file content to detect whether the file Rollover has happened

If file has rolled over, Engine will reset and read from the beginning of the file

Resolution

Upgrade to Argent AT 3.1A-1407-T5 or later