TEC logfile adapter is resending old events that were already processed by TEC
TEC adapter is monitoring several logsources. Once in a while, old events from one of the monitored logsource are re-sent
One of the logs monitored was periodically truncated. By default, a monitored logsource is considered as new if the filesize change. By truncating the log, the adapter treated the logsource as new and the remaining events were re-sent to TEC. See also parameter 'NewLogBasedOn' in the adapter's guide.
Resolving the problem
Do not truncate existing logs. Either erase logs completely or use rotating logs.