From 7870b3de5182ad6c2bff08fc0b95ed175760d2e2 Mon Sep 17 00:00:00 2001 From: Joshua Powers Date: Wed, 10 Jul 2024 04:55:08 -0600 Subject: [PATCH] docs(outputs.syslog): Doc syslog message format length limits (#15611) --- plugins/outputs/syslog/README.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/plugins/outputs/syslog/README.md b/plugins/outputs/syslog/README.md index cbab2d1f2..de4b9fb16 100644 --- a/plugins/outputs/syslog/README.md +++ b/plugins/outputs/syslog/README.md @@ -7,7 +7,12 @@ The syslog output plugin sends syslog messages transmitted over framing. Syslog messages are formatted according to [RFC -5424](https://tools.ietf.org/html/rfc5424). +5424](https://tools.ietf.org/html/rfc5424). Per this RFC there are limitations +to the field sizes when sending messages. See the [Syslog Message Format][] +section of the RFC. Sending messages beyond these sizes may get dropped by a +strict receiver silently. + +[Syslog Message Format]: https://datatracker.ietf.org/doc/html/rfc5424#section-6 ## Global configuration options