I also wanted to point out that I don't know if this would be an nxlog issue or graylog. If it seems to be nxlog please let me know and I'll work with them. I removed all extractors that the input had and I'm still getting truncated messages.
On Monday, August 29, 2016 at 2:11:49 PM UTC-4, Jamie P wrote: > > I have 2 domain controllers using nxlog to forward logs to our graylog > instance. I am using the exact conf file on both servers. Both servers > are using the same input on the server (the default appliance gelf input > that comes with the OVA), one domain controller's event logs come through > with zero issues. The second one however is having its messages truncated > and I am not seeing the full message. The message looks fine in Windows > Event viewer on the second server itself. I've attached what I am looking > at. Any insight would be most appreciated. > > Thanks. > > > > <https://lh3.googleusercontent.com/-FPNGXq9sodc/V8R61PCkaoI/AAAAAAAAAP0/Qmcp34A_AIYPFG7UBMNleXLvVcMLc_plwCLcB/s1600/gelf%2Btruncated.jpg> > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/df4ee158-e493-4455-a4cf-43f4d0bc4fbf%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.