1

What is the maximum character length does logstash can read as a single event from a file (single line input, NOT multiline input)? Also does logstash take specific number of spaces/tabs in between a line as newline?

Black Frog
  • 11,595
  • 1
  • 35
  • 66
user3366706
  • 1,529
  • 3
  • 31
  • 54

2 Answers2

3

Looks like the file input uses filewatch, which has a 32K limit.

Alain Collins
  • 16,268
  • 2
  • 32
  • 55
0

The previous answer is referring to an old version of filewatch where the chunk size was hard-coded to 32K

Recent file-input still uses this as the default chunk size but allows configuration if the line is longer than 32K.

The plugin also prints a warning when a delimiter is not found reading a chunk.

kares
  • 7,076
  • 1
  • 28
  • 38