Log messages truncated on syslog collector

Follow

David Combaluzier

• October 12, 2017 11:33

Hello, I have added a Syslog collector and my logs are truncated to 2048 characters.
Is there a Sumologic limit, collector limit or known Syslog limit that could explain this ?
I loose data and cannot parse the log properly as it is not complete.

0

• 

  Kevin Keech

  • October 12, 2017 17:34

  Hi David,
  
  

  The Collector by default supports UDP messages up to 2048 bytes.  To increase the UDP message length limit to the maximum datagram size (65k), you can add the following configuration to collector/config/collector.properties and restart the Collector:

  collector.syslog.udp.readBufferSize = 65535

  
  For TCP Syslog the Collector supports single-line TCP messages up to 65,535 bytes by default.
  
  More on the Syslog Source and the limits for UDP or TCP can be found in the help documentation here. 
  
  
  
  
  

  1

  Comment actions Permalink
• 

  David Combaluzier

  • October 13, 2017 06:27

  Yes thank you, this is the good solution

  0

  Comment actions Permalink

Please sign in to leave a comment.