Help Center
-
ArcSight
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
XSOAR
-
- Articles coming soon
- Articles coming soon
-
-
Docker
-
Elastic
-
- Articles coming soon
- Articles coming soon
-
-
Linux
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
- Articles coming soon
-
-
MS Sentinel
-
- Articles coming soon
- Articles coming soon
-
-
Kubernetes
-
- Articles coming soon
- Articles coming soon
-
-
Development
-
Diverse
-
NNMi
-
- Articles coming soon
-
- Articles coming soon
- Articles coming soon
-
-
Virtualization
-
Vulnerability
-
Network
-
Microsoft
< All Topics
Print
How to Increase the ArcSight connector character length of the rawEvent field
Posted
Updated
ByLars Niklasson
In order to increase this limit, it is needed to add the following parameter to the agent properties.
- Go to the following path:
<Connector_installation_folder>\current\user\agent
- Open the file:
agent.properties - Add the following parameter at the end of the file by using the text editor of your preference:
Please note the maximum value is 16k. However, it is recommended to adjust the parameter to match with your actual requirement.agent.mainevent.component.com.arcsight.agent.loadable._DOSProtector.enabled=false raw.event.max.size=16000
- Restart the connector
Table of Contents