Component monitor message limitation of 255 chars is causing problems.

gbutler

Has anyone figured out a way to work around the 255 character limitation for events messages?  Using the windows event monitor template I'm capturing the event message. The problem I have is the event message is greater then 255 characters.  I removed all spaces/line feeds/returns but still short.

The events I'm capturing are security related, we'd like the event message captured and placed on a separate host.

jiri.tomek

Hello gbutler,
unfortunately there is no workaround. Database field that holds message is only 250 characters long and even if you change it's length to more than 250 characters, message is trimmed in application so no more than 250 characters are stored.

Included Windows Event Log Monitor component doesn't return event message so I assume that you use custom script for monitoring event log. Try to parse event message and generate new message containing only required data that would fit into 250 characters.