Centralized rsyslog : max size of message

fauguste picture fauguste · Sep 4, 2013 · Viewed 12.4k times · Source

I configured a centralized syslog on Ubuntu 12.04.

I set the max message size on both servers

$MaxMessageSize 20k

I have 2 different comportment :

  • client : message are logged completly
  • server : message are truncated at 2k

I can find configuration of any other buffer size.

Is it a limitation of rsyslog or a configuration problem ?

Thanks for your help.

Fred

Answer

fauguste picture fauguste · Sep 6, 2013

I found the solution.

The parameter :

$MaxMessageSize 20k

must be set before network declaration (at the top of rsyslog.conf file) :

$ModLoad imtcp
$InputTCPServerRun 1514