> > > Hi everyone, > > > > I have a program that is sending long lines into the logs.... they are > > arriving at the local server and into the logs correctly but are being > > truncated when being received on a remote server, and I can't understand > why. > > what is your maxmessagesize on the two systems? that sounds like the cause of > your problem. > > when you exceed maxmessagesize, that starts the next message, and since > there > isn't the syslog header at that point, it parses incorrectly, causing the type > of problem that you are having. > I had thought the same, but I have:
$MaxMessageSize 8192k global(workDirectory="/var/spool/rsyslog" preserveFQDN="on" maxMessageSize="8192k") at the top of my receiver config, and the sender has $MaxMessageSize 7168k global(workDirectory="/var/spool/rsyslog" preserveFQDN="on" maxMessageSize="7168k") But what gets me is the small amount of message that's received... that seems smaller than even the default. Scot Kreienkamp |Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive| Monroe, Michigan 48162 | Office: 734-384-6403 | | Mobile: 7349151444 | Email: [email protected] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
