[Rspamd-Users] log configuration smtp_rcpts truncated

[Sophie Loewenthal]

> On 14 May 2019, at 6:23 pm, Mailing List SVR <lists at svrinformatica.it> wrote:
> 
> Il 14/05/19 16:51, Alexander Moisseev via Users ha scritto:
>>> On 14.05.2019 15:02, Mailing List SVR wrote:
>>> 
>>> but if the mail has many recipients the log is truncated, in /var/log/mail.log I have something like this:
>>> 
>>> rcpts: <rcpt1 at example.com,rcpt2 at example.com,rcpt3 at example.com,rcpt4 at example.com,rcpt5 at example.com,rcpt6 at example.com,rcpt7 at example.com,rcpt8 at example.com,...>
>>> 
>>> the web ui reports all the recipients instead, if this a bug or a configuration error?
>>> 
>> 
>> Syslog packet length is limited to 1k [1] so we have to truncate long lists (e.g. recipients, symbols, etc).
>> 
>> 1. https://tools.ietf.org/html/rfc3164#section-4.1
> 
> SNIP
> for example in rsyslog the maximum is 8K and is configurable using $MaxMessageSize parameter,
> 
> https://www.rsyslog.com/doc/v8-stable/configuration/global/index.html
> 
> could rspamd make this length configurable (default 1K) and not hard coded? thanks
> 
Hi,
slightly off topic: The default in rsyslog is 8k not 1k.  1k is far too low these days especially for Auditd to syslog, and JSON formatted messages.  

Syslog-fb default is also 8k.