# Logstash truncate messages with more than 30 kb

**URL:** https://discuss.elastic.co/t/logstash-truncate-messages-with-more-than-30-kb/356755
**Category:** Logstash
**Created:** [April 4, 2024, 9:32am UTC](https://discuss.elastic.co/t/logstash-truncate-messages-with-more-than-30-kb/356755 "2024-04-04T09:32:31Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Pedro\_Lopez\_Gonzalez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pedro_lopez_gonzalez/32/131886_2.png) [@Pedro\_Lopez\_Gonzalez](https://discuss.elastic.co/u/Pedro_Lopez_Gonzalez)
#### Post date: [April 4, 2024, 9:32am UTC](https://discuss.elastic.co/t/logstash-truncate-messages-with-more-than-30-kb/356755/1 "2024-04-04T09:32:32Z")

</div>

Hi all  
Im sending messages from filebeat to logstash, but the messages are more longers than 30 kb.  
Logstash is truncating the messages and I can't process complete.  
It's possible to increase this limit?

> beats {  
> port =\> 5045  
> }

That is my config

Thanks

---

<div class="post-metadata">

### Author: ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)
#### Post date: [April 4, 2024, 10:13am UTC](https://discuss.elastic.co/t/logstash-truncate-messages-with-more-than-30-kb/356755/2 "2024-04-04T10:13:02Z")

</div>

Actually LS do not truncate, your message has been truncated on FB side.  
Go to the filebeat.yml, review params:

- `multiline.max_lines` - The default is 500
- `max_bytes`: The default is 10485760 bytes
- `max_message`\_size - depend on plugin
- `harvester_buffer_size` - The default is 16384 bytes bytes

[Check FB reference](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-reference-yml.html).

---

<div class="post-metadata">

### Author: ![Pedro\_Lopez\_Gonzalez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pedro_lopez_gonzalez/32/131886_2.png) [@Pedro\_Lopez\_Gonzalez](https://discuss.elastic.co/u/Pedro_Lopez_Gonzalez)
#### Post date: [April 4, 2024, 3:16pm UTC](https://discuss.elastic.co/t/logstash-truncate-messages-with-more-than-30-kb/356755/3 "2024-04-04T15:16:00Z")

</div>

Thanks @Rios  
I changed the max\_lines params and I'm testing right now.  
Regards
