Why are logs duplicated or lost?

Logs collected repeatedly

Cause 1: The log file is dumped, and the dumped file is still matched.

Description: If the file name of the configured log path contains a wildcard character, for example, /tmp/*.log, after the /tmp/test.log file is dumped to /tmp/test.001.log, it is still matched by the wildcard rule and is collected again as a new file.

Log loss

Cause 1: The log file exists for less than 5 seconds.

Description: CCI detects log files at an interval of 5 seconds. If the duration from the time when a log file is created to the time when it is deleted or renamed is less than 5 seconds, it may not be collected.