hi team, Im was getting below warn logs in fluentb...
# fluent-bit
s
hi team, Im was getting below warn logs in fluentbit
Copy code
[2025/10/23 09:39:52] [ warn] [input:tail:tail.0] purged rotated file while data ingestion is paused, consider increasing rotate_wait
[2025/10/23 09:41:31] [ warn] [input] tail.0 paused (mem buf overlimit)
[2025/10/23 09:41:31] [ info] [input] pausing tail.0
[2025/10/23 09:41:31] [ info] [input] resume tail.0
[2025/10/23 09:41:31] [ info] [input] tail.0 resume (mem buf overlimit)
now I have switched from memory to stroagetype filesystem: I dont see overlimit logs anymore but I observed a log line
Copy code
[/src/fluent-bit/plugins/in_tail/tail_fs_inotify.c:147 errno=2] No such file or directory
does this lead to log loss ? I wanted some help in understanding why does this happen and what is the result of this
p
What version?
What OS/target?
s
fluent-bit_3.2.5
Looks like it is not watching the file for some reason, as to why that could be a few things and depends on the specifics of your setup
s
Copy code
"failed to allocate a needed resource (ENOSPC)");
which resource it might be specifially im trying to understand
p
nope, that's not the line I pointed at
https://github.com/fluent/fluent-bit/blob/v3.2.5/plugins/in_tail/tail_fs_inotify.c#L147 is the code for 3.2.5 but I would suggest at the very least stepping up to a supported version anyway
s
okay got it
p
that branch you are talking about only gets taken for a specific error code which is not what you have there, you have another one from https://man7.org/linux/man-pages/man2/inotify_add_watch.2.html
s
okay got it, it might be due to some load test that was ongoing
also what I wanted to understand was, if it not watching the file for some reason
would that also mean it did not capture some logs
p
possibly
s
okay, thanks for helping out @Pat 😄 got some handy docs