Hi
What are your opinions on increasing the size of the syslog message.
Increasing syslog message size will potentially have a negative impact on the performance in log collection, normalization and parsing.
On the other hand it is important to be able to extract the necessary information from collected log messages, and some windows evenLog messages have increased over time.
Take for example event ID 4662 ‘An operation was performed on an object’, it can exceed 34000 in message size.
Another example is custom application logs, where developers might have another opinion, of what meaningful logs should contain.
Regards
Hans
