PaloAltoNetworks/SafeNetworking

Remove stdout { codec => rubydebug } from all logstash outputs

punisherVX opened this issue · 2 comments

As of 3.5, the stdout { codec => rubydebug } will write all output to the local system's syslog and this can create rather large files depending on what type of data is being ingested (i.e. traffic and/or GTP). While the file isn't huge, and does get rotated on a best effort algorithm, it can get fairly large (as in > 50GB). This can cause problems with disk space and is better left turned off by default.

zube commented

sdndude said: This is fixed in 8fb9e8a

zube commented

sdndude said: This is fixed in decca24