How to prevent truncation of line?


I have some events in elasticsearch where filebeat sets the log.flag to truncated.

From release notes I would say, that the truncation limit is configurable.

  • Add tag "truncated" to "log.flags" if incoming line is longer than configured limit. 7991

Currently my event is cut at about 25MB.

What Key do I need to tune? I may have lines with maybe 200MB length.
Filebeat is shipping to logstash.

Thanks, Andreas

Hi @asp,

The config you are looking for is max_bytes:
Best regards

thanks a lot

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.