Skip to content

Commit 68c695a

Browse files
committed
bug fixes in logstash parsing pipeline
1 parent e22ffe5 commit 68c695a

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

dashboards/templates/composable/component/malcolm_common.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@
103103
},
104104
"strings": {
105105
"type": "wildcard",
106-
"ignore_above": 4096,
106+
"ignore_above": 16384,
107107
"doc_values": false,
108108
"normalizer": "lowercase"
109109
}

logstash/pipelines/filescan/12_normalize.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ filter {
5353
id => "ruby_filescan_strings_truncate"
5454
tag_on_exception => "_rubyexception_filescan_strings_truncate"
5555
code => '
56-
max_bytes = 32766
56+
max_bytes = 16384
5757
["[results][strelka][result][scan][strings][strings]"].each do |field_path|
5858
val = event.get(field_path)
5959
next if val.nil?

0 commit comments

Comments
 (0)