Hi
I've got very basic app to gather logs from IIS 8.0 based website. There is nothing fancy on the forwarder (6.3.5 - can't use any newer) apart from the throughput setting that was increased to 2MB/s due to a volume of data generated.
The problem I'm experiencing is that 10-20 entries out of 200k would get cut half way through the cookie field for example. The whole entry is let say 5000 characters and it would be split and indexed as two entries. There are other log entries of the similar size that are being indexed correctly.
Any ideas what to tweak to resolve it? I'm playing currently with BREAK_ONLY_BEFORE_DATE, LINE_BRAKER_LOOKBEHIND and TRUNCATE with not much luck unless I'm using them incorrectly.
Thanks for any guidance or ideas.
Daz
↧