Help Center
< All Topics
Print

How to Increase the ArcSight connector character length of the rawEvent field

In order to increase this limit, it is needed to add the following parameter to the agent properties.

  • Go to the following path:

     <Connector_installation_folder>\current\user\agent
  • Open the file:

    agent.properties
  • Add the following parameter at the end of the file by using the text editor of your preference:

    Please note the maximum value is 16k. However, it is recommended to adjust the parameter to match with your actual requirement.

    agent.mainevent.component.com.arcsight.agent.loadable._DOSProtector.enabled=false raw.event.max.size=16000
  • Restart the connector
Table of Contents
sv_SESwedish