[rsyslog-notify] Forum Thread: Re: Break up huge logs into chunks before shipping them? - (Mode 'reply')

[noreply at adiscon.com]

User: ZillaG 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=27183#p27183

Message: 
----------
I didn't have to do this after all. I just had to set

[code:147pq7fm]$MaxMessageSize 64k[/code:147pq7fm]

in rsyslog.conf

and tell Logstash to setup a 64k input buffer, and it works for me rsyslog
-> ELK setup works for me now.