Hi Jamie, your issue is caused by the ShortMessageLength setting in nxlog: https://nxlog.co/docs/nxlog-ce/nxlog-reference-manual.html#xm_gelf
This will be addressed out-of-the-box in the next version of Graylog, see https://github.com/Graylog2/graylog-plugin-collector/issues/6 for details. Cheers, Jochen On Monday, 29 August 2016 20:11:49 UTC+2, Jamie P wrote: > > I have 2 domain controllers using nxlog to forward logs to our graylog > instance. I am using the exact conf file on both servers. Both servers > are using the same input on the server (the default appliance gelf input > that comes with the OVA), one domain controller's event logs come through > with zero issues. The second one however is having its messages truncated > and I am not seeing the full message. The message looks fine in Windows > Event viewer on the second server itself. I've attached what I am looking > at. Any insight would be most appreciated. > > Thanks. > > > > <https://lh3.googleusercontent.com/-FPNGXq9sodc/V8R61PCkaoI/AAAAAAAAAP0/Qmcp34A_AIYPFG7UBMNleXLvVcMLc_plwCLcB/s1600/gelf%2Btruncated.jpg> > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2fc3e573-970f-4839-81b8-1542fd37a729%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
