Layer7 API Management

 View Only

 hostname for remote syslog, and max message size

Yannick Carbonneaux's profile image
Yannick Carbonneaux posted Nov 24, 2021 10:06 AM
Hi everyone,

on v10, we just configured a remote syslog which is working fine except for 2 things:
  1.  The hostname sent out is not the right one. I see the hostname in the first characters by doing a tcp dump :
E...."@.@.+.....
...F.......lm...
P..:k+..<14>Nov.
24.15:03:50.237.
<hostname>.SSG[246]
..........
>> where can we change this  ?

2. The messages are truncated to 1024 characters. Can we change this limit somewhere ?

Thanks for your insights,
Yannick
Yannick Carbonneaux's profile image
Yannick Carbonneaux
So thanks to Outbound syslog messages truncated at 1024 bytes in size (broadcom.com) I found out my problem for point 2. 
They are still truncated at around 10K characters even though i've setup the property to 1048576, but it is still much better.

Point 1 with hostname still outstanding, even with a reboot ... the system hostname is correct everywhere I've looked, but it seem the Gateway takes it from somewhere else... (reverse DNS lookup?)