About torbael

torbael · ‎08-22-2011

Are you trying to send 5000 Bytes over UDP with syslog? If you use syslog I think that it could be a maximun Byte limit on the protocol.

torbael · ‎06-13-2011

Try this one: | makemv delim=";" category | mvexpand category | search category="3" OR category="6"

torbael · ‎05-02-2011

Hi, I'm using an UDP connection with syslog and Splunk. My problem is that Splunk only show me the firsts 2072 characters of a log. I try to increase the values of "TRUNCATE" and "MAX_EVENTS" inside the props.conf, but it didn't work. Also I checked with Wireshark that the logs are sended correctly with syslog. Any suggestions? Thanks.

Posts	3
Solutions	0
Karma Given	2
Karma Received	1
Member Since	‎05-02-2011

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

truncate logs with syslog

Re: UDP Events truncated at 2048 bytes

Re: Getting multivalued field values that are trun...

truncate logs with syslog