Hi,
I have a text file with very long line (2K characters), the raw_event
seems too short on one of my windows server 2008.
It seems that I don't reproduce this behavior on another server windows
server 2008.
I use the version 2.8.1248 of nxlog.
Do I need to modify some options to increase the
I find my problem, It is linked to a quote.
I don't understand why raw_event seems truncated. But when it works, I
have "\n". With '\n' it doesn't.
--
One dashboard for servers and applications across Physical-Virtual-C
Personally, I send all in syslog format to logstash.
I convert the multi-lines logs into single line with:
'Exec if $raw_event =~ s/[\r\n]/ /g {}'
Below an extract of my log files.
Exec $hostname = '%HOSTNAME%';
Exec $SyslogSeverityValue = 5;
Exec if $raw_event =~ s/[\r\n