unified2: append open instead of trucate open so that in case we rotate within a...

diff --git a/src/alert-unified2-alert.c b/src/alert-unified2-alert.c
index 07bd44d7f7de0af32cba041ae6a1033e1487385d..6ee07478ac0d6de63a49645c12a2dc2349722e3d 100644 (file)
--- a/src/alert-unified2-alert.c
+++ b/src/alert-unified2-alert.c
@@ -1084,7 +1084,7 @@ int Unified2AlertOpenFileCtx(LogFileCtx *file_ctx, const char *prefix)
 
     snprintf(filename, PATH_MAX, "%s/%s.%" PRIu32, log_dir, prefix, (uint32_t)ts.tv_sec);
 
-    file_ctx->fp = fopen(filename, "wb");
+    file_ctx->fp = fopen(filename, "ab");
     if (file_ctx->fp == NULL) {
         SCLogError(SC_ERR_FOPEN, "failed to open %s: %s", filename,
             strerror(errno));