How to prevent truncation of line?

Elastic Stack Beats
1

Hi,

I have some events in elasticsearch where filebeat sets the log.flag to truncated.

From release notes I would say, that the truncation limit is configurable.

  • Add tag "truncated" to "log.flags" if incoming line is longer than configured limit. 7991

Currently my event is cut at about 25MB.

What Key do I need to tune? I may have lines with maybe 200MB length.
Filebeat is shipping to logstash.

Thanks, Andreas

2

Hi @asp,

The config you are looking for is max_bytes: https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html#_max_bytes
Best regards

3

thanks a lot

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.