Thanks, I changed $MaxMessageSize to 64k, restarted rsyslog, but I'm still seeing the same behaviour.
I should mention that I'm using /bin/logger to send the syslog messages. Is this the proper executable to use? /var/log/messages on the rsyslog box shows the same truncated payloads that I'm seeing on the destination box. >> a tcupdump on the box receiving the events shows that my event is >> getting truncated and sent incorrectly. Is there a payload size limit >> to rsyslog that is configurable? Any relevant gotchas when sending >> relatively large payloads via tcp? >Have a look at http://www.rsyslog.com/doc/rsyslog_conf_global.html >$MaxMessageSize >-Ryan Kelly _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

