diff --git a/userspace/falco/app_actions/process_events.cpp b/userspace/falco/app_actions/process_events.cpp index d7f95227..07f24cda 100644 --- a/userspace/falco/app_actions/process_events.cpp +++ b/userspace/falco/app_actions/process_events.cpp @@ -98,6 +98,11 @@ application::run_result application::do_inspect( { rc = inspector->next(&ev); + if (should_reopen_outputs()) + { + reopen_outputs(); + } + if(should_terminate()) { terminate(); @@ -108,10 +113,6 @@ application::run_result application::do_inspect( restart(); break; } - else if (should_reopen_outputs()) - { - reopen_outputs(); - } else if(rc == SCAP_TIMEOUT) { if(unlikely(ev == nullptr))