I am exploring extended events and came across a question I can't solve using the Microsoft documentation:
When reading events from the file target we can specify and initial offset so we can read the logs in in a differential manner. For example:
sys.fn_xe_file_target_read_file('log*.xel', 'log*.xem', 'specific.xel', 984576)
Now all events up to and including 984576 will be ignored. Events after the offset will be returned.
From the documentation:
Used to specify last offset read previously and skips all events up to the offset (inclusive). Event enumeration starts after the offset specified. initial_offset is bigint. If null is specified as the argument the entire file will be read.
My question is how can we be sure that we don't skip events given the fact that file_offset is not unique and shared:
If we use an offset there is a change that new events with a share offset are not returned right?
Does the function fn_xe_file_target_read_file bump the offset so that this possibility cannot occur?