Logstash Error - RuntimeError: entity expansion has grown too large

Elastic Stack Logstash
1

Hello,
I've a lot of xml-file containing log events and some of them are pretty large.

I'm trying to parse them with Logstash, but when the xml is too large, I get an xmlparsefailure and I got this error:

RuntimeError: entity expansion has grown too large.

Have you any idea to what can I do to handle this?

Thank you!

2

The XML parser has a limit of 10 KB for the maximum size of an entity substitution. This was introduced to protect against denial of service attacks.

The parser itself allow you to increase REXML::Document.entity_expansion_text_limit, but logstash does not provide a way to set that.

3

Thank you Badger!!