I also wanted to point out that I don't know if this would be an nxlog issue or graylog. If it seems to be nxlog please let me know and I'll work with them. I removed all extractors that the input had and I'm still getting truncated messages.
On Monday, August 29, 2016 at 2:11:49 PM UTC-4, Jamie P wrote: > > I have 2 domain controllers using nxlog to forward logs to our graylog > instance. I am using the exact conf file on both servers. Both servers > are using the same input on the server (the default appliance gelf input > that comes with the OVA), one domain controller's event logs come through > with zero issues. The second one however is having its messages truncated > and I am not seeing the full message. The message looks fine in Windows > Event viewer on the second server itself. I've attached what I am looking > at. Any insight would be most appreciated. > > Thanks. > > > > <https://lh3.googleusercontent.com/-FPNGXq9sodc/V8R61PCkaoI/AAAAAAAAAP0/Qmcp34A_AIYPFG7UBMNleXLvVcMLc_plwCLcB/s1600/gelf%2Btruncated.jpg> > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/df4ee158-e493-4455-a4cf-43f4d0bc4fbf%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
