search

solarwinds / fluent-plugin-papertrail

Fluentd integration with Papertrail.
Apache License 2.0
21 stars 11 forks source link

maximum_syslog_packet_size default value exceeded #30

Closed bmihaescu closed 5 years ago

bmihaescu commented 5 years ago

Hi,

I have set the default value for maximum_syslog_packet_size witch is 99990. What will happen with my log packet if I will exceed that value. It will be truncated or just ignored ?

Thanks

kyleroot commented 5 years ago

It will be truncated.

I found that value in the remote_syslog2 shipper that SolarWinds provides. The "official" by-the-book limit for syslog is 1024. The value is a config_param so you could try setting it to a larger value, however I have no idea what the cutoff for Papertrail is, or how efficiently they process values larger than 99990 bytes.

The config field to set in your fluent.conf would be maximum_syslog_packet_size.

    config_param :maximum_syslog_packet_size, :integer, default: 99990