There was an error while loading. Please reload this page.
1 parent e22ffe5 commit 68c695aCopy full SHA for 68c695a
2 files changed
dashboards/templates/composable/component/malcolm_common.json
@@ -103,7 +103,7 @@
103
},
104
"strings": {
105
"type": "wildcard",
106
- "ignore_above": 4096,
+ "ignore_above": 16384,
107
"doc_values": false,
108
"normalizer": "lowercase"
109
}
logstash/pipelines/filescan/12_normalize.conf
@@ -53,7 +53,7 @@ filter {
53
id => "ruby_filescan_strings_truncate"
54
tag_on_exception => "_rubyexception_filescan_strings_truncate"
55
code => '
56
- max_bytes = 32766
+ max_bytes = 16384
57
["[results][strelka][result][scan][strings][strings]"].each do |field_path|
58
val = event.get(field_path)
59
next if val.nil?
0 commit comments