log-filestore: tag truncated files as such

Tag truncated files as truncated in the same way log-file does.

diff --git a/src/log-filestore.c b/src/log-filestore.c
index 12e56143ca8479fca266aac25d4c3ddc58edf3f2..0d18d5be3bba8886ed00abe12deeca9f952ea773 100644 (file)
--- a/src/log-filestore.c
+++ b/src/log-filestore.c
@@ -365,11 +365,12 @@ static TmEcode LogFilestoreLogWrap(ThreadVars *tv, Packet *p, void *data, Packet
 
                 if (file_trunc && ff->state < FILE_STATE_CLOSED)
                     ff->state = FILE_STATE_TRUNCATED;
+                if (file_close && ff->state < FILE_STATE_CLOSED)
+                    ff->state = FILE_STATE_TRUNCATED;
 
                 if (ff->state == FILE_STATE_CLOSED ||
                     ff->state == FILE_STATE_TRUNCATED ||
-                    ff->state == FILE_STATE_ERROR ||
-                    (file_close == 1 && ff->state < FILE_STATE_CLOSED))
+                    ff->state == FILE_STATE_ERROR)
                 {
                     if (ffd->next == NULL) {
                         LogFilestoreLogCloseMetaFile(ff);