Why is the file in /var/cache being truncated ? How will check-log do pattern search on a empty file

[jsiddharth]

tail on /var/cache/check-log/.../var/log/auth.log reports
9333715tail: /var/cache/check-log/default/var/log/auth.log: file truncated
9333715tail: /var/cache/check-log/default/var/log/auth.log: file truncated
9333715tail: /var/cache/check-log/default/var/log/auth.log: file truncated

URGENT ISSUE

[jsiddharth]

Does this line need to change ?
From

FileUtils.mkdir_p(File.dirname(@state_file))
    File.open(@state_file, 'w') do |file|
      file.write(@bytes_to_skip + bytes_read)
    end

To //sorry for java syntax, but I think you get the point

if (bytes_read > 0) {
FileUtils.mkdir_p(File.dirname(@state_file))
    File.open(@state_file, 'w') do |file|
      file.write(@bytes_to_skip + bytes_read)
    end
}

[majormoses]

I have not used this plugin or read through it's code enough to comment on why the file is truncated.

Regarding an empty file (or a non existent file for that matter) we should just check that the files size is 0:

if File.stat(my_file).size.zero? || !File.exist?(my_file)
  p "skipping #{my_file} as it is empty or does not exist
else
  # do current logic
end