Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
In order to have syslog-ng drop messages under a specific size, the variable flags(store-raw-message) must be set for sources to make RAWMSG available first.
Create a filter. For example:
filter f_length { "$(length ${RAWMSG})" > "50" };
Now add the new filter to your log statement. For example: