While ConsumeWindowsEventLog is running, if Windows Event Log service is restarted, or ERROR_EVT_QUERY_RESULT_STALE (15011) is returned, the processor keeps running, but will not receive further log events.
Current work-around is restarting the processor manually.
We could implement auto-reconnect logic like below, so that the processor can recover from such situation automatically.
- Add a new processor property, ''Inactive duration to reconnect", e.g. "3 mins"
- At onTrigger, check how long has it passed since the last message was received. If it exceeds the configured duration, reset the consumer