Improved error message when Fleet cannot write osquery log results to logging destination. (#15726)

Improved error message when Fleet cannot write osquery log results to
logging destination.
#15455 



# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
This commit is contained in:
Victor Lyuboslavsky 2023-12-21 12:15:25 -06:00 committed by GitHub
parent 72621e31ce
commit 846b3537c0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 1 deletions

View File

@ -0,0 +1 @@
Improved error message when Fleet cannot write osquery log results to logging destination.

View File

@ -1578,7 +1578,11 @@ func (svc *Service) SubmitResultLogs(ctx context.Context, logs []json.RawMessage
}
if err := svc.osqueryLogWriter.Result.Write(ctx, filteredLogs); err != nil {
return newOsqueryError("error writing result logs: " + err.Error())
return newOsqueryError(
"error writing result logs " +
"(if the logging destination is down, you can reduce frequency/size of osquery logs by " +
"increasing logger_tls_period and decreasing logger_tls_max_lines): " + err.Error(),
)
}
return nil
}