https://community.dynatrace.com/t5/Troubleshooting/Troubleshooting-log-rotation-issues-in-Log-Module/ta-p/300207 <DIV class="standard-markdown grid-cols-1 grid [&amp;_&gt;_*]:min-w-0 gap-3 !gap-3.5"> <H2 class="text-text-100 mt-3 -mb-1 text-[1.125rem] font-bold">Table of contents</H2> <OL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-decimal flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2"><A class="underline underline underline-offset-2 decoration-1 decoration-current/40 hover:decoration-current focus:decoration-current" href="#summary" target="_blank" rel="noopener">Summary</A></LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2"><A class="underline underline underline-offset-2 decoration-1 decoration-current/40 hover:decoration-current focus:decoration-current" href="#problem" target="_blank" rel="noopener">Problem</A></LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2"><A class="underline underline underline-offset-2 decoration-1 decoration-current/40 hover:decoration-current focus:decoration-current" href="#resolution" target="_blank" rel="noopener">Resolution</A> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2"><A class="underline underline underline-offset-2 decoration-1 decoration-current/40 hover:decoration-current focus:decoration-current" href="#custom-log-source-path-pattern-misconfiguration" target="_blank" rel="noopener">Custom log source path pattern misconfiguration</A></LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2"><A class="underline underline underline-offset-2 decoration-1 decoration-current/40 hover:decoration-current focus:decoration-current" href="#rotation-with-a-directory-change" target="_blank" rel="noopener">Rotation with a directory change</A></LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2"><A class="underline underline underline-offset-2 decoration-1 decoration-current/40 hover:decoration-current focus:decoration-current" href="#immediate-compression-after-rotation" target="_blank" rel="noopener">Immediate compression after rotation</A></LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2"><A class="underline underline underline-offset-2 decoration-1 decoration-current/40 hover:decoration-current focus:decoration-current" href="#file-deleted-before-log-module-reads-all-content" target="_blank" rel="noopener">File deleted before Log Module reads all content</A></LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2"><A class="underline underline underline-offset-2 decoration-1 decoration-current/40 hover:decoration-current focus:decoration-current" href="#queue-style-log-sources" target="_blank" rel="noopener">Queue-style log sources</A></LI> </UL> </LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2"><A class="underline underline underline-offset-2 decoration-1 decoration-current/40 hover:decoration-current focus:decoration-current" href="#whats-next" target="_blank" rel="noopener">What's next</A></LI> </OL> <HR /> <H2 class="text-text-100 mt-3 -mb-1 text-[1.125rem] font-bold">Summary</H2> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">This article helps you troubleshoot log rotation issues that prevent Log module from correctly ingesting your log files. It applies to Log module deployed via OneAgent or Dynatrace Operator on both SaaS and Managed environments, and covers file-based logs on Linux and Windows.</P> <H2 class="text-text-100 mt-3 -mb-1 text-[1.125rem] font-bold">Problem</H2> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">Logs from a rotated file are missing, duplicated, or only partially ingested. Common symptoms include:</P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Rotated files exist on disk but are not ingested by Log module.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">The active log file is ingested, but gaps appear at every rotation boundary.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Rotated files are ingested, but the currently active log file is missing.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">The tail of a log file is missing at rotation boundaries (the last lines before rotation are absent).</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">The same log content appears twice in Dynatrace after rotation.</LI> </UL> <H3 class="text-text-100 mt-2 -mb-1 text-base font-bold">Is your rotation scenario supported?</H3> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">Use the table below to check whether the rotation behavior you're seeing is supported. If your scenario is listed as unsupported, jump to the corresponding section for guidance or a workaround.</P> <DIV class="overflow-x-auto w-full px-2 mb-6"> <TABLE class="min-w-full border-collapse text-sm leading-[1.7] whitespace-normal"> <THEAD class="text-left"> <TR> <TH class="text-text-100 border-b-0.5 border-border-300/60 py-2 pr-4 align-top font-bold" scope="col">Scenario</TH> <TH class="text-text-100 border-b-0.5 border-border-300/60 py-2 pr-4 align-top font-bold" scope="col">Support</TH> </TR> </THEAD> <TBODY> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Index-based rotation (<CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">.1</CODE>, <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">.2</CODE>, …)</TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":white_heavy_check_mark:">✅</span> Supported</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Rename-and-replace</TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":white_heavy_check_mark:">✅</span> Supported</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Copy-and-truncate</TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":white_heavy_check_mark:">✅</span> Supported (content must not be deleted before the agent reads it)</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Rotation identifier in filename (date, counter, GUID with separator)</TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":white_heavy_check_mark:">✅</span> Supported</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Fast rotation on CRI-O</TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":white_heavy_check_mark:">✅</span> Supported</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Rotation with directory change</TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":cross_mark:">❌</span> Not supported</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Immediate compression after rotation</TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":cross_mark:">❌</span> Not supported</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Queue logic (fixed-size file, oldest content removed)</TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":cross_mark:">❌</span> Not supported</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Unrecognized rotation identifier</TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":cross_mark:">❌</span> Not detected</TD> </TR> </TBODY> </TABLE> </DIV> <H2 class="text-text-100 mt-3 -mb-1 text-[1.125rem] font-bold">Resolution</H2> <H3 class="text-text-100 mt-2 -mb-1 text-base font-bold">Custom log source path pattern misconfiguration</H3> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Symptoms</STRONG></P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Rotated files exist on disk but are not ingested by Log module.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">The active log file is ingested, but gaps appear at every rotation boundary.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Or the reverse: rotated files are ingested, but the currently active log file is missing.</LI> </UL> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Cause&nbsp;</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">The custom log source path does not match both the active file and its rotated counterparts. The most common mistake is placing an extra separator character (such as <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">.</CODE>) before the <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">#</CODE> wildcard. That separator exists in the rotated filename but not in the active filename, so the pattern matches only one of them.</P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Example</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">Files on disk:</P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Active: <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">/var/log/app/test.log</CODE></LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Rotated: <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">/var/log/app/test.2026.05.07.log</CODE></LI> </UL> <DIV class="overflow-x-auto w-full px-2 mb-6"> <TABLE class="min-w-full border-collapse text-sm leading-[1.7] whitespace-normal"> <THEAD class="text-left"> <TR> <TH class="text-text-100 border-b-0.5 border-border-300/60 py-2 pr-4 align-top font-bold" scope="col">Configured path</TH> <TH class="text-text-100 border-b-0.5 border-border-300/60 py-2 pr-4 align-top font-bold" scope="col">Matches <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">test.log</CODE></TH> <TH class="text-text-100 border-b-0.5 border-border-300/60 py-2 pr-4 align-top font-bold" scope="col">Matches <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">test.2026.05.07.log</CODE></TH> <TH class="text-text-100 border-b-0.5 border-border-300/60 py-2 pr-4 align-top font-bold" scope="col">Result</TH> </TR> </THEAD> <TBODY> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">/var/log/app/test.log</CODE></TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":white_heavy_check_mark:">✅</span></TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":cross_mark:">❌</span></TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Active file only; rotated files missed</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">/var/log/app/test.#.log</CODE></TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":cross_mark:">❌</span></TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":white_heavy_check_mark:">✅</span></TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Rotated files only; active file missed</TD> </TR> <TR> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">/var/log/app/test#.log</CODE></TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":white_heavy_check_mark:">✅</span></TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top"><span class="lia-unicode-emoji" title=":white_heavy_check_mark:">✅</span></TD> <TD class="border-b-0.5 border-border-300/30 py-2 pr-4 align-top">Both active and rotated files ingested</TD> </TR> </TBODY> </TABLE> </DIV> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Resolution</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">In <STRONG>Settings </STRONG>&gt;<STRONG> Collect and capture </STRONG>&gt;<STRONG> Log Monitoring </STRONG>&gt;<STRONG> Custom log sources</STRONG>, update the custom log source path to remove the separator between the static part of the filename and the <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">#</CODE> placeholder:</P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Before: <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">/var/log/app/test.#.log</CODE></LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">After: <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">/var/log/app/test#.log</CODE></LI> </UL> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">Changes propagate to the agent within approximately 90 seconds. New rotated files are picked up at the next rotation scan (every 5 minutes for custom log sources).</P> <HR /> <H3 class="text-text-100 mt-2 -mb-1 text-base font-bold">Rotation with a directory change</H3> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Symptoms</STRONG></P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">The active log file is monitored correctly, but rotated files in a subdirectory or archive folder are not ingested.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Occasionally, the same log content appears twice (duplicate records in Dynatrace).</LI> </UL> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Cause (brief)</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">The Log Module does not follow files that are moved across directory boundaries during rotation. When a rotation tool moves a rotated file to a different directory, Log module loses track of it. Depending on timing, this can result in either data loss or duplicate ingestion.</P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Resolution</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">Configure your rotation tool to keep all rotated files in the same directory as the active log file.</P> <HR /> <H3 class="text-text-100 mt-2 -mb-1 text-base font-bold">Immediate compression after rotation</H3> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Symptoms</STRONG></P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">The first rotated file (for example, <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">app.log.1.gz</CODE>) appears in the directory, but its content is not ingested.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Logs from the period immediately before rotation are missing.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">All subsequent rotated files (<CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">.2</CODE>, <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">.3</CODE>, …) also show no ingestion because they are also compressed.</LI> </UL> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Cause (brief)</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">Log Module cannot read compressed files. This is a known limitation.</P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Workaround</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">Configure your rotation tool to delay compression. Keep rotated files in their uncompressed form long enough for Log module to read them before compression occurs.</P> <HR /> <H3 class="text-text-100 mt-2 -mb-1 text-base font-bold">File deleted before Log module reads all content</H3> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Symptoms</STRONG></P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">The tail of a log file is missing at rotation boundaries (the last lines before rotation are absent).</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">The issue occurs specifically with copy-and-truncate rotation, where the copied file is deleted shortly after it's created.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">On Kubernetes: a Log Module restart combined with fast container log rotation causes the last line of a rotated file to be dropped.</LI> </UL> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Cause (brief)</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">If a file is deleted before Log module finishes reading it, the remaining content is lost. This affects:</P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Copy-and-truncate rotation, where the rotation script deletes the copied file quickly.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Application restarts that remove and recreate the log file before the agent reads the pre-restart tail.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Fast container log rotation coinciding with a Log Module restart.</LI> </UL> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Current status</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">This is a known limitation. An improvement is tracked in the product backlog but is not yet available.</P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Workaround</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">Try any of the following:</P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Increase the delay between file deletion and the next rotation step. For example, add a short <CODE class="bg-text-200/5 border border-0.5 border-border-300 text-danger-000 whitespace-pre-wrap rounded-[0.4rem] px-1 py-px text-[0.9rem]">sleep</CODE> in your post-rotation script before cleanup.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">For application restarts, ensure the application flushes its log buffer before exiting, so all content is written before rotation.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Reduce the rotation frequency so the agent has more time to read the file before it is removed.</LI> </UL> <HR /> <H3 class="text-text-100 mt-2 -mb-1 text-base font-bold">Queue-style log sources</H3> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Symptoms</STRONG></P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">The log file size remains approximately constant; old records are continuously overwritten.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Dynatrace shows repeated or shuffled log content from the same source.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Very old timestamps appear in newly ingested records.</LI> </UL> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Cause</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">Some applications use a circular-buffer approach: the log file has a fixed maximum size, and the oldest content is removed in place as new content is appended. This rotation model is fundamentally not supported by Log Module.</P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]"><STRONG>Workaround</STRONG></P> <P class="font-claude-response-body break-words whitespace-normal leading-[1.7]">There is no workaround that restores full support for queue-style sources. Consider one of the following:</P> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">If your application supports an alternative logging mode (for example, standard append-only files with external rotation), switch to that.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">Use the Dynatrace API or an OpenTelemetry Collector to ingest these logs via a custom exporter that handles the circular-buffer semantics.</LI> </UL> <H2 class="text-text-100 mt-3 -mb-1 text-[1.125rem] font-bold">What's next</H2> <UL class="[li_&amp;]:mb-0 [li_&amp;]:mt-1 [li_&amp;]:gap-1 [&amp;:not(:last-child)_ul]:pb-1 [&amp;:not(:last-child)_ol]:pb-1 list-disc flex flex-col gap-1 pl-8 mb-3"> <LI class="font-claude-response-body whitespace-normal break-words pl-2">For missing logs unrelated to rotation, see <EM>Troubleshooting missing logs</EM>.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">For ingest delay, see <EM>Troubleshooting log ingest delay</EM>.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">For multi-line entries split incorrectly or grouped together, see <EM>Troubleshooting log record boundary detection</EM>.</LI> <LI class="font-claude-response-body whitespace-normal break-words pl-2">For JSON-specific parsing issues, see <EM>Troubleshooting JSON log parsing</EM>.</LI> </UL> </DIV> Tue, 02 Jun 2026 13:13:46 GMT Kacper 2026-06-02T13:13:46Z https://community.dynatrace.com/t5/Troubleshooting/Troubleshooting-log-rotation-issues-in-Log-Module/ta-p/300207 <P><LI-TOC indent="15" liststyle="disc" maxheadinglevel="2"></LI-TOC></P> <DIV class="lia-message-template-content-zone"> <P>*<EM>Use a table of contents for longer articles.&nbsp;</EM></P> <H1>Summary</H1> <P><EM>*This is a mandatory section.</EM></P> <P><EM>Short description of which part of the Dynatrace platform the article refers to and what kind of problem it will help resolve / task it will describe.</EM></P> <P>&nbsp;</P> <H1>Problem</H1> <P><EM>*This is a mandatory section.</EM></P> <P><EM>Provide a precise description of the problem / task to be described.</EM></P> <P>&nbsp;</P> <H1>Troubleshooting steps</H1> <P><EM>*This section can be omitted.</EM></P> <P>&nbsp;</P> <H1>Resolution</H1> <P><EM>*This section can be omitted for ticket‑creation articles.</EM></P> <H1>What's next</H1> <P><EM>*This is a mandatory section.</EM></P> </DIV> Tue, 02 Jun 2026 13:13:46 GMT https://community.dynatrace.com/t5/Troubleshooting/Troubleshooting-log-rotation-issues-in-Log-Module/ta-p/300207 Kacper 2026-06-02T13:13:46Z