Forum Discussion

Jason_Antman_40's avatar
Jason_Antman_40
Icon for Nimbostratus rankNimbostratus
Apr 25, 2014

How to bypass log 1024 byte limit / truncation

I'm trying to log the content of excessively long Cookie HTTP headers, per the instructions in some questions such as:   https://devcentral.f5.com/questions/logging-http-header-that-is-longer-tha...
application delivery
devops
iRules
log
LTM
management
  • Ian_McLean_3779's avatar
    Ian_McLean_3779
    Apr 26, 2014

    Can't you install the same version on your test/dev box as what you run in prod?

     

Jason_Antman_40's avatar
Jason_Antman_40
Icon for Nimbostratus rankNimbostratus
Apr 26, 2014

Thanks for the replies.

 

I ended up being very careful, and setting up HSL on the production load balancer, but tested first with a less-important VIP. It seems to be working fine, and I can get the full 9k+ log messages (I'm sending the data to Logstash. It captures the full message without any problem, though I can't seem to get the formatting right for logstash to parse it as a valid syslog message).

 

  • Dan_Markhasin_1's avatar
    Dan_Markhasin_1
    Icon for Nimbostratus rankNimbostratus
    Sep 03, 2015
    Hi Jason, I'm trying to do the same thing - capture certain transactions via logstash - but I'm running into truncation issues even when using HSL. Can you share the settings you've used on F5 / Logstash to get it working?