Log messages truncated on syslog collector
Hello, I have added a Syslog collector and my logs are truncated to 2048 characters.
Is there a Sumologic limit, collector limit or known Syslog limit that could explain this ?
I loose data and cannot parse the log properly as it is not complete.
The Collector by default supports UDP messages up to 2048 bytes. To increase the UDP message length limit to the maximum datagram size (65k), you can add the following configuration to collector/config/collector.properties and restart the Collector:
collector.syslog.udp.readBufferSize = 65535
For TCP Syslog the Collector supports single-line TCP messages up to 65,535 bytes by default.
More on the Syslog Source and the limits for UDP or TCP can be found in the help documentation here.
Please sign in to leave a comment.