Filebeat is not able to read the message event if the attachment is more than 2 GB in in request contact the log file.
Hello,
You need to provide a lot more of context.
What is your input? Please share your entire filebeat.yml.
Maybe this can help:
- type: filestream
#Defines the buffer size every harvester uses when fetching the file
harvester_buffer_size: 16384
#Maximum number of bytes a single log event can have
#All bytes after max_bytes are discarded and not sent. The default is 10MB.
#This is especially useful for multiline log messages which can get large.
message_max_bytes: 10485760
#The maximum number of lines that are combined into one event.
#In case there are more the max_lines the additional lines are discarded.
#Default is 500
multiline.max_lines: 500
HI Rios,
this is fixed 90% issue, but i need max size, there no limitation
Continued here