From 969b014220d653a298f4a1bb8bff88985b71a8a9 Mon Sep 17 00:00:00 2001 From: Florence Morris Date: Thu, 14 Aug 2025 16:48:48 -0400 Subject: [PATCH 1/2] In configure-logs.md, added note to net parameter to use tcp rather than udp due to length limit. --- src/current/v25.3/configure-logs.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/current/v25.3/configure-logs.md b/src/current/v25.3/configure-logs.md index 70e17e3a888..629ed796aba 100644 --- a/src/current/v25.3/configure-logs.md +++ b/src/current/v25.3/configure-logs.md @@ -215,7 +215,7 @@ Along with the [common sink parameters](#common-sink-parameters), each Fluentd s |-----------|--------------------------------------------------------------------------------------------------------------------| | `channels` | List of channels that output to this sink. Use a YAML array or string of [channel names]({% link {{ page.version.version }}/logging-overview.md %}#logging-channels), `ALL` to include all channels, or `ALL EXCEPT {channels}` to include all channels except the specified channel names.

For more details on acceptable syntax, see [Logging channel selection](#logging-channel-selection). | | `address` | Network address and port of the log collector. | -| `net` | Network protocol to use. Can be `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp` | +| `net` | Network protocol to use. Options are `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp`

**Note:** Use the default of `tcp` rather than `udp`. The UDP/IP protocol has a ~65 KB (65,507 bytes) limit per datagram. This limit is enforced by the operating system. Log lines that exceed this limit return a `message too long` error. | | `buffering` | Configures buffering of log messages for the sink, with the following sub-parameters:When `max-staleness` and `flush-trigger-size` are used together, whichever is reached first will trigger the flush. `buffering` is enabled by default for [Fluentd-compatible](#output-to-fluentd-compatible-network-collectors) log sinks. To explicitly disable log buffering, specify `buffering: NONE` instead. This setting is typically disabled for [security-related logs]({% link {{ page.version.version }}/logging-use-cases.md %}#security-and-audit-monitoring). See [Log buffering](#log-buffering-for-network-sinks) for more details and usage.| For an example network logging configuration, see [Logging use cases]({% link {{ page.version.version }}/logging-use-cases.md %}#network-logging). From 618e63c18369a480f390b320a897bcf8cf1ceae1 Mon Sep 17 00:00:00 2001 From: Florence Morris Date: Mon, 18 Aug 2025 13:56:57 -0400 Subject: [PATCH 2/2] =?UTF-8?q?Incorporated=20Peach=E2=80=99s=20feedback.?= =?UTF-8?q?=20Copied=20note=20to=20v23.2+.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/current/v23.2/configure-logs.md | 2 +- src/current/v24.1/configure-logs.md | 2 +- src/current/v24.2/configure-logs.md | 2 +- src/current/v24.3/configure-logs.md | 2 +- src/current/v25.1/configure-logs.md | 2 +- src/current/v25.2/configure-logs.md | 2 +- src/current/v25.3/configure-logs.md | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/src/current/v23.2/configure-logs.md b/src/current/v23.2/configure-logs.md index 0eadc85e883..ce7600e5186 100644 --- a/src/current/v23.2/configure-logs.md +++ b/src/current/v23.2/configure-logs.md @@ -214,7 +214,7 @@ Along with the [common sink parameters](#common-sink-parameters), each Fluentd s |-----------|--------------------------------------------------------------------------------------------------------------------| | `channels` | List of channels that output to this sink. Use a YAML array or string of [channel names]({% link {{ page.version.version }}/logging-overview.md %}#logging-channels), `ALL` to include all channels, or `ALL EXCEPT {channels}` to include all channels except the specified channel names.

For more details on acceptable syntax, see [Logging channel selection](#logging-channel-selection). | | `address` | Network address and port of the log collector. | -| `net` | Network protocol to use. Can be `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp` | +| `net` | Network protocol to use. Options are `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp`

**Note:** In most cases, use the default of `tcp` rather than `udp`. The UDP/IP protocol has a ~65 KB (65,507 bytes) limit per datagram. This limit is enforced by the operating system. Log lines that exceed this limit return a `message too long` error. | | `buffering` | Configures buffering of log messages for the sink, with the following sub-parameters:When `max-staleness` and `flush-trigger-size` are used together, whichever is reached first will trigger the flush. `buffering` is enabled by default for [Fluentd-compatible](#output-to-fluentd-compatible-network-collectors) log sinks. To explicitly disable log buffering, specify `buffering: NONE` instead. This setting is typically disabled for [security-related logs]({% link {{ page.version.version }}/logging-use-cases.md %}#security-and-audit-monitoring). See [Log buffering](#log-buffering-for-network-sinks) for more details and usage.| For an example network logging configuration, see [Logging use cases]({% link {{ page.version.version }}/logging-use-cases.md %}#network-logging). diff --git a/src/current/v24.1/configure-logs.md b/src/current/v24.1/configure-logs.md index 02f901d3feb..fa9c291efd6 100644 --- a/src/current/v24.1/configure-logs.md +++ b/src/current/v24.1/configure-logs.md @@ -214,7 +214,7 @@ Along with the [common sink parameters](#common-sink-parameters), each Fluentd s |-----------|--------------------------------------------------------------------------------------------------------------------| | `channels` | List of channels that output to this sink. Use a YAML array or string of [channel names]({% link {{ page.version.version }}/logging-overview.md %}#logging-channels), `ALL` to include all channels, or `ALL EXCEPT {channels}` to include all channels except the specified channel names.

For more details on acceptable syntax, see [Logging channel selection](#logging-channel-selection). | | `address` | Network address and port of the log collector. | -| `net` | Network protocol to use. Can be `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp` | +| `net` | Network protocol to use. Options are `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp`

**Note:** In most cases, use the default of `tcp` rather than `udp`. The UDP/IP protocol has a ~65 KB (65,507 bytes) limit per datagram. This limit is enforced by the operating system. Log lines that exceed this limit return a `message too long` error. | | `buffering` | Configures buffering of log messages for the sink, with the following sub-parameters:When `max-staleness` and `flush-trigger-size` are used together, whichever is reached first will trigger the flush. `buffering` is enabled by default for [Fluentd-compatible](#output-to-fluentd-compatible-network-collectors) log sinks. To explicitly disable log buffering, specify `buffering: NONE` instead. This setting is typically disabled for [security-related logs]({% link {{ page.version.version }}/logging-use-cases.md %}#security-and-audit-monitoring). See [Log buffering](#log-buffering-for-network-sinks) for more details and usage.| For an example network logging configuration, see [Logging use cases]({% link {{ page.version.version }}/logging-use-cases.md %}#network-logging). diff --git a/src/current/v24.2/configure-logs.md b/src/current/v24.2/configure-logs.md index 02f901d3feb..fa9c291efd6 100644 --- a/src/current/v24.2/configure-logs.md +++ b/src/current/v24.2/configure-logs.md @@ -214,7 +214,7 @@ Along with the [common sink parameters](#common-sink-parameters), each Fluentd s |-----------|--------------------------------------------------------------------------------------------------------------------| | `channels` | List of channels that output to this sink. Use a YAML array or string of [channel names]({% link {{ page.version.version }}/logging-overview.md %}#logging-channels), `ALL` to include all channels, or `ALL EXCEPT {channels}` to include all channels except the specified channel names.

For more details on acceptable syntax, see [Logging channel selection](#logging-channel-selection). | | `address` | Network address and port of the log collector. | -| `net` | Network protocol to use. Can be `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp` | +| `net` | Network protocol to use. Options are `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp`

**Note:** In most cases, use the default of `tcp` rather than `udp`. The UDP/IP protocol has a ~65 KB (65,507 bytes) limit per datagram. This limit is enforced by the operating system. Log lines that exceed this limit return a `message too long` error. | | `buffering` | Configures buffering of log messages for the sink, with the following sub-parameters:When `max-staleness` and `flush-trigger-size` are used together, whichever is reached first will trigger the flush. `buffering` is enabled by default for [Fluentd-compatible](#output-to-fluentd-compatible-network-collectors) log sinks. To explicitly disable log buffering, specify `buffering: NONE` instead. This setting is typically disabled for [security-related logs]({% link {{ page.version.version }}/logging-use-cases.md %}#security-and-audit-monitoring). See [Log buffering](#log-buffering-for-network-sinks) for more details and usage.| For an example network logging configuration, see [Logging use cases]({% link {{ page.version.version }}/logging-use-cases.md %}#network-logging). diff --git a/src/current/v24.3/configure-logs.md b/src/current/v24.3/configure-logs.md index b641cf757c6..843f9cb0165 100644 --- a/src/current/v24.3/configure-logs.md +++ b/src/current/v24.3/configure-logs.md @@ -215,7 +215,7 @@ Along with the [common sink parameters](#common-sink-parameters), each Fluentd s |-----------|--------------------------------------------------------------------------------------------------------------------| | `channels` | List of channels that output to this sink. Use a YAML array or string of [channel names]({% link {{ page.version.version }}/logging-overview.md %}#logging-channels), `ALL` to include all channels, or `ALL EXCEPT {channels}` to include all channels except the specified channel names.

For more details on acceptable syntax, see [Logging channel selection](#logging-channel-selection). | | `address` | Network address and port of the log collector. | -| `net` | Network protocol to use. Can be `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp` | +| `net` | Network protocol to use. Options are `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp`

**Note:** In most cases, use the default of `tcp` rather than `udp`. The UDP/IP protocol has a ~65 KB (65,507 bytes) limit per datagram. This limit is enforced by the operating system. Log lines that exceed this limit return a `message too long` error. | | `buffering` | Configures buffering of log messages for the sink, with the following sub-parameters:When `max-staleness` and `flush-trigger-size` are used together, whichever is reached first will trigger the flush. `buffering` is enabled by default for [Fluentd-compatible](#output-to-fluentd-compatible-network-collectors) log sinks. To explicitly disable log buffering, specify `buffering: NONE` instead. This setting is typically disabled for [security-related logs]({% link {{ page.version.version }}/logging-use-cases.md %}#security-and-audit-monitoring). See [Log buffering](#log-buffering-for-network-sinks) for more details and usage.| For an example network logging configuration, see [Logging use cases]({% link {{ page.version.version }}/logging-use-cases.md %}#network-logging). diff --git a/src/current/v25.1/configure-logs.md b/src/current/v25.1/configure-logs.md index 70e17e3a888..02301ff3f93 100644 --- a/src/current/v25.1/configure-logs.md +++ b/src/current/v25.1/configure-logs.md @@ -215,7 +215,7 @@ Along with the [common sink parameters](#common-sink-parameters), each Fluentd s |-----------|--------------------------------------------------------------------------------------------------------------------| | `channels` | List of channels that output to this sink. Use a YAML array or string of [channel names]({% link {{ page.version.version }}/logging-overview.md %}#logging-channels), `ALL` to include all channels, or `ALL EXCEPT {channels}` to include all channels except the specified channel names.

For more details on acceptable syntax, see [Logging channel selection](#logging-channel-selection). | | `address` | Network address and port of the log collector. | -| `net` | Network protocol to use. Can be `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp` | +| `net` | Network protocol to use. Options are `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp`

**Note:** In most cases, use the default of `tcp` rather than `udp`. The UDP/IP protocol has a ~65 KB (65,507 bytes) limit per datagram. This limit is enforced by the operating system. Log lines that exceed this limit return a `message too long` error. | | `buffering` | Configures buffering of log messages for the sink, with the following sub-parameters:When `max-staleness` and `flush-trigger-size` are used together, whichever is reached first will trigger the flush. `buffering` is enabled by default for [Fluentd-compatible](#output-to-fluentd-compatible-network-collectors) log sinks. To explicitly disable log buffering, specify `buffering: NONE` instead. This setting is typically disabled for [security-related logs]({% link {{ page.version.version }}/logging-use-cases.md %}#security-and-audit-monitoring). See [Log buffering](#log-buffering-for-network-sinks) for more details and usage.| For an example network logging configuration, see [Logging use cases]({% link {{ page.version.version }}/logging-use-cases.md %}#network-logging). diff --git a/src/current/v25.2/configure-logs.md b/src/current/v25.2/configure-logs.md index 70e17e3a888..02301ff3f93 100644 --- a/src/current/v25.2/configure-logs.md +++ b/src/current/v25.2/configure-logs.md @@ -215,7 +215,7 @@ Along with the [common sink parameters](#common-sink-parameters), each Fluentd s |-----------|--------------------------------------------------------------------------------------------------------------------| | `channels` | List of channels that output to this sink. Use a YAML array or string of [channel names]({% link {{ page.version.version }}/logging-overview.md %}#logging-channels), `ALL` to include all channels, or `ALL EXCEPT {channels}` to include all channels except the specified channel names.

For more details on acceptable syntax, see [Logging channel selection](#logging-channel-selection). | | `address` | Network address and port of the log collector. | -| `net` | Network protocol to use. Can be `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp` | +| `net` | Network protocol to use. Options are `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp`

**Note:** In most cases, use the default of `tcp` rather than `udp`. The UDP/IP protocol has a ~65 KB (65,507 bytes) limit per datagram. This limit is enforced by the operating system. Log lines that exceed this limit return a `message too long` error. | | `buffering` | Configures buffering of log messages for the sink, with the following sub-parameters:When `max-staleness` and `flush-trigger-size` are used together, whichever is reached first will trigger the flush. `buffering` is enabled by default for [Fluentd-compatible](#output-to-fluentd-compatible-network-collectors) log sinks. To explicitly disable log buffering, specify `buffering: NONE` instead. This setting is typically disabled for [security-related logs]({% link {{ page.version.version }}/logging-use-cases.md %}#security-and-audit-monitoring). See [Log buffering](#log-buffering-for-network-sinks) for more details and usage.| For an example network logging configuration, see [Logging use cases]({% link {{ page.version.version }}/logging-use-cases.md %}#network-logging). diff --git a/src/current/v25.3/configure-logs.md b/src/current/v25.3/configure-logs.md index 629ed796aba..02301ff3f93 100644 --- a/src/current/v25.3/configure-logs.md +++ b/src/current/v25.3/configure-logs.md @@ -215,7 +215,7 @@ Along with the [common sink parameters](#common-sink-parameters), each Fluentd s |-----------|--------------------------------------------------------------------------------------------------------------------| | `channels` | List of channels that output to this sink. Use a YAML array or string of [channel names]({% link {{ page.version.version }}/logging-overview.md %}#logging-channels), `ALL` to include all channels, or `ALL EXCEPT {channels}` to include all channels except the specified channel names.

For more details on acceptable syntax, see [Logging channel selection](#logging-channel-selection). | | `address` | Network address and port of the log collector. | -| `net` | Network protocol to use. Options are `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp`

**Note:** Use the default of `tcp` rather than `udp`. The UDP/IP protocol has a ~65 KB (65,507 bytes) limit per datagram. This limit is enforced by the operating system. Log lines that exceed this limit return a `message too long` error. | +| `net` | Network protocol to use. Options are `tcp`, `tcp4`, `tcp6`, `udp`, `udp4`, `udp6`, or `unix`.

**Default:** `tcp`

**Note:** In most cases, use the default of `tcp` rather than `udp`. The UDP/IP protocol has a ~65 KB (65,507 bytes) limit per datagram. This limit is enforced by the operating system. Log lines that exceed this limit return a `message too long` error. | | `buffering` | Configures buffering of log messages for the sink, with the following sub-parameters:When `max-staleness` and `flush-trigger-size` are used together, whichever is reached first will trigger the flush. `buffering` is enabled by default for [Fluentd-compatible](#output-to-fluentd-compatible-network-collectors) log sinks. To explicitly disable log buffering, specify `buffering: NONE` instead. This setting is typically disabled for [security-related logs]({% link {{ page.version.version }}/logging-use-cases.md %}#security-and-audit-monitoring). See [Log buffering](#log-buffering-for-network-sinks) for more details and usage.| For an example network logging configuration, see [Logging use cases]({% link {{ page.version.version }}/logging-use-cases.md %}#network-logging).