Logstash syslog TCP output breaking to parts

Elastic Stack Logstash
1

Hi, question I got from a customer regarding Logstash 2.3.4 we use there:

  • I've noticed that the logs are sent in multiple syslog message. 1 application log item = X tcp syslog request. Is it possible to make 1 application log item = 1 tcp syslog even if it is big ?

Thanks.

2

It depends. Is there anything in the messages that indicate that they've been split up?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.