Hi, are there any error messages in the logs of your Graylog or Elasticsearch nodes?
Could you attach an example message to demonstrate the issue? What kind of input are you using in Graylog (GELF UDP, GELF TCP, or something else) and what client are you using the send these messages? Cheers, Jochen On Tuesday, 11 October 2016 05:58:51 UTC+2, au.ja...@gmail.com wrote: > > Reference: http://docs.graylog.org/en/2.1/pages/gelf.html > > Data is NOT logged when the value of _[additional field] in the GELF > message exceeds some value (somewhere in the region of 40KBs). > > Is there some configuration I can amend to allow _[additional field] to > hold larger data? I've tried updating max_chunk_size without success. > > Also, I'm aware that full_message can store large messages. Wondering if > _[additional field] can be configured to as well. Cheers. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/5d380fef-24d8-47d3-a419-3bdeb3285305%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
