Return
-
Title
Exported log statistics to csv format have limited value length for SDATA fields -
Description
When exporting log statistics the value in SDATA field is truncated
For example the SDATA ".sdata.win@18372.4.event_username" field contains
MYDOMAIN.COM\user01@MYDOMAIN.COM
However you see in the CSV export:
MYDOMAIN.COM\user01@MYDOM -
Cause
59 character limitation when indexing Name-value pairs. -
Resolution
WORKAROUND:
When indexing name-value pairs, there is a 59 characters limitation applied
to this format: "<name-of-nvpair>=<value-of-nvpair>".
Do not use long name parts, in order to avoid the premature truncation of the
value part.
STATUS:
Waiting for a fix in a future release of Syslog-ng Store Box -
Change Request
SSB-3482