Sv: Re: ParseCEF processor fails when Msg field exceed 1023 characters

2019-01-04 Thread Felix McPherson
optionally call the parser with the do validate flag to false. Maybe you can create a jira with a sanitized example line that causes the error? On January 3, 2019 at 15:13:14, Felix McPherson (ljungpip...@yahoo.se) wrote: Hi, I'musing the ParseCEF processor to parse CEF message to

Sv: Re: ParseCEF processor fails when Msg field exceed 1023 characters

2019-01-04 Thread Felix McPherson
that though.  Andy LoPresto alopre...@apache.org alopresto.apa...@gmail.com PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4  BACE 3C6E F65B 2F7D EF69 On Jan 3, 2019, at 12:13 PM, Felix McPherson wrote: Hi, I'm using the ParseCEF processor to parse CEF message to Json format. Unfortunately the Par

ParseCEF processor fails when Msg field exceed 1023 characters

2019-01-03 Thread Felix McPherson
Hi, I'm using the ParseCEF processor to parse CEF message to Json format. Unfortunately the ParseCEF processor fails for message/events that holds a string in the Msg field that has more than 1023 character. According to the CEF standard the Msg field in an event shall not exceed 1023 character.