I have some events in elasticsearch where filebeat sets the log.flag to truncated.
From release notes I would say, that the truncation limit is configurable.
- Add tag "truncated" to "log.flags" if incoming line is longer than configured limit. 7991
Currently my event is cut at about 25MB.
What Key do I need to tune? I may have lines with maybe 200MB length.
Filebeat is shipping to logstash.