Which of the log storage method arranges event logs in the form of a circular buffer?

The term "wrapping" describes a log storage method where the log file is treated as a circular buffer. When the file reaches its maximum configured size, new log entries begin to overwrite the oldest entries at the beginning of the file. This ensures that the log file does not grow indefinitely, which could exhaust disk space, while always retaining the most recent event data. This method is common in systems that generate a high volume of logs where only the latest events are of primary interest.

A. FIFO (First-In, First-Out) describes a data processing queue or buffer principle, not the specific mechanism of overwriting old data in a fixed-size file.
B. LIFO (Last-In, First-Out) describes a stack data structure, which is not how circular log buffers operate for overwriting old entries.
C. Non-wrapping means that when the log storage is full, logging either stops or the old log is archived and a new one is started, but old entries are not overwritten.

1. Nemeth, E., Snyder, G., Hein, T. R., Whaley, B., & Makin, D. (2017). UNIX and Linux System Administration Handbook (5th ed.). Addison-Wesley Professional. p. 819. In the context of logrotate, it describes how logs can be rotated, but the circular buffer concept is a core logging strategy often implemented directly by logging daemons like journald.

2. IBM Knowledge Center. (n.d.). Circular logging. "In circular logging, the log files are used as a ring. When the last log file is full, the logger starts writing to the first log file again." This document describes the exact "wrapping" behavior for database transaction logs.

3. Microsoft Docs. (n.d.). Event Tracing for Windows (ETW) - Circular Buffers. "For continuous logging, you can set the log file mode to EVENTTRACEFILEMODECIRCULAR. When the log file reaches its maximum size, ETW overwrites the oldest events in the file with the new events."