You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
we are using HttpEventCollectorLogbackAppender in raw mode and it looks like sent messages are somehow cut at a bit less than 10240 bytes.
Checking source code I see there is a limit in batchSize (coincidential?) at 10240 and I cannot override it as we are in raw mode[1]: is there any tip around this issue? Sometime we need to send large-ish json payload in the message and we are losing informations.
This is our logback.xml configuration:
<appender name="SPLUNK_APPENDER"
class="com.splunk.logging.HttpEventCollectorLogbackAppender">
<url>${SPLUNK_URL}</url>
<token>${SPLUNK_TOKEN}</token>
<index>${SPLUNK_INDEX}</index>
<!-- disableCertificateValidation should be true as we do not use valid certificates -->
<disableCertificateValidation>true</disableCertificateValidation>
<source>${SOURCE}</source>
<sourcetype>logback</sourcetype>
<messageFormat>text</messageFormat>
<type>raw</type>
<layout class="ch.qos.logback.classic.PatternLayout">
<pattern>%d{yyyy-MM-dd'T'HH:mm:ss.SSSXXX, UTC} %.-3level SPAN_ID=%X{span_id} TRACE_ID=%X{trace_id} callId=%X{CALL_ID} uID=%X{USER_ID} ST=%X{SESSION_TOKEN} CH=%X{CHANNEL} %logger{35} - %msg%n%xException</pattern>
</layout>
</appender>
Hi all,
we are using HttpEventCollectorLogbackAppender in raw mode and it looks like sent messages are somehow cut at a bit less than 10240 bytes.
Checking source code I see there is a limit in batchSize (coincidential?) at 10240 and I cannot override it as we are in raw mode[1]: is there any tip around this issue? Sometime we need to send large-ish json payload in the message and we are losing informations.
This is our logback.xml configuration:
Thanks in advance for any help
[1]
splunk-library-javalogging/src/main/java/com/splunk/logging/HttpEventCollectorLogbackAppender.java
Line 251 in cf59a50
The text was updated successfully, but these errors were encountered: