Hi Jamie, your issue is caused by the ShortMessageLength setting in nxlog: https://nxlog.co/docs/nxlog-ce/nxlog-reference-manual.html#xm_gelf
This will be addressed out-of-the-box in the next version of Graylog, see https://github.com/Graylog2/graylog-plugin-collector/issues/6 for details. Cheers, Jochen On Monday, 29 August 2016 20:11:49 UTC+2, Jamie P wrote: > > I have 2 domain controllers using nxlog to forward logs to our graylog > instance. I am using the exact conf file on both servers. Both servers > are using the same input on the server (the default appliance gelf input > that comes with the OVA), one domain controller's event logs come through > with zero issues. The second one however is having its messages truncated > and I am not seeing the full message. The message looks fine in Windows > Event viewer on the second server itself. I've attached what I am looking > at. Any insight would be most appreciated. > > Thanks. > > > > <https://lh3.googleusercontent.com/-FPNGXq9sodc/V8R61PCkaoI/AAAAAAAAAP0/Qmcp34A_AIYPFG7UBMNleXLvVcMLc_plwCLcB/s1600/gelf%2Btruncated.jpg> > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2fc3e573-970f-4839-81b8-1542fd37a729%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
