search

yoyojacky / eventlog-to-syslog

Automatically exported from code.google.com/p/eventlog-to-syslog
0 stars 0 forks source link

Eventlog message size too large - Event: Dr. Watson #76

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. Application log, Event source: Dr. Watson, Event ID 4097
2. Message size in original log seen up to 150 kBytes.
3. Sending event via evtsys to syslog-ng.

What is the expected output? What do you see instead?
Expected: i.E. "Die Anwendung "C:\isoft\client\RIS\24.0.5003.2\XXX.EXE" hat 
einen Programmfehler verursacht. Datum und Zeit des Fehlers: 25.11.2012 um 
19:01:37.748 Ausnahme: 80000003 an Adresse 7C93A229 (ntdll!DbgBreakPoint)"
I see instead: "Eventlog message size too large: "Application": 141340 bytes"

What version of the product are you using? On what operating system?
Windows 2003 and 2008 R2
evtsys Version: 4.4.3-32 Bit-LP and 4.4.3-64 Bit (SLES 11) 

Please provide any additional information below.
I know, that the size must be limited to ensure secure functionality, but it is 
very important to know, which application stopped.
Is there any trick to get the message?

Many thanks

Andreas B. 
(Berlin, Germany)

Original issue reported on code.google.com by habmobil...@googlemail.com on 26 Nov 2012 at 8:12