From a1a858707a06d88c5cc7eba64f2ccd7a584bdc9f Mon Sep 17 00:00:00 2001 From: Zakhar Bessarab Date: Fri, 26 Sep 2025 17:14:44 +0400 Subject: [PATCH] log_processor/data_sources/victorialogs: update parameters description Update parameters description in sync with https://github.com/crowdsecurity/crowdsec/pull/3924 --- .../docs/log_processor/data_sources/victorialogs.md | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/crowdsec-docs/docs/log_processor/data_sources/victorialogs.md b/crowdsec-docs/docs/log_processor/data_sources/victorialogs.md index 01ac280b1..f2c8b7a03 100644 --- a/crowdsec-docs/docs/log_processor/data_sources/victorialogs.md +++ b/crowdsec-docs/docs/log_processor/data_sources/victorialogs.md @@ -14,6 +14,7 @@ mode: tail log_level: info url: http://localhost:9428/ limit: 1000 +since: 1m query: | app:nginx auth: @@ -23,10 +24,6 @@ labels: type: nginx ``` -:::info -The reader will always start at "now" for `tail` mode. -::: - Look at the `configuration parameters` to view all supported options. ## Parameters @@ -96,6 +93,10 @@ The maximum duration VictoriaLogs is allowed to be unavailable (once startup is Default to `30 seconds`. +### `since` + +Defines an offset duration to apply to the "start" time of VictoriaLogs query. +This is useful in order to avoid missing logs when restarting crowdsec. Note that it is possible to have logs processed multiple times when using this parameter. ## DSN and command-line