[rsyslog-notify] Forum Thread: Transmit UDP longer than 2048 bytes - rsyslog7 - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Mon Nov 9 05:03:04 CET 2015
User: pilotman28
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26112#p26112
Message:
----------
Guys.
I know I can't be the only one who has ever wanted to transmit a single
message longer than 2048 without rsyslog7 chopping it up into two messages.
My TCP receipt of the message shows it whole but when I do a receive of the
message on the other hop, transmitted and received via UDP, it transmits
the first 2048 whole and then the remainder is orphaned and sent along.
The last line of my send config is *.* IP:port;raw. I'm stripping off the
header before I send it on to ensure I'm maximizing my message content.
Anyone know of how to release rsyslog7 to sending whole messages instead of
chopping them up? TCP is not an option in this particular case otherwise I
wouldn't have this issue. It's rsyslog7 as provided in the latest stable
release as distributed by CentOS. Is there a directive I'm missing? If I
use another method of sending, other than rsyslog, it transmits the whole
message but I want to keep it as simple as possible by using rsyslog
instead of a dumb Arcsight connector instead. Little help?
More information about the rsyslog-notify
mailing list