From 0945152bc4f99edddc926ed554b6ab6f9ed887a8 Mon Sep 17 00:00:00 2001
From: Dmitriy Alekseev <1865999+dragoangel@users.noreply.github.com>
Date: Mon, 21 Oct 2024 15:36:03 +0200
Subject: do not allow empty headers, fix stripping of headers by limit of
 symbols count and add headers count limit

---
 conf/modules.d/elastic.conf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'conf')

diff --git a/conf/modules.d/elastic.conf b/conf/modules.d/elastic.conf
index aafa8cbdf..e4c70bc87 100644
--- a/conf/modules.d/elastic.conf
+++ b/conf/modules.d/elastic.conf
@@ -47,7 +47,8 @@ elastic {
     replicas_count = 1;
     refresh_interval = 5; # seconds
     dynamic_keyword_ignore_above = 256;
-    headers_text_ignore_above = 2048; # strip headers value and add "..." to the end; set 0 to disable limit
+    headers_count_ignore_above = 5; # record only N first same named headers, add "ignored above..." if reached, set 0 to disable limit
+    headers_text_ignore_above = 2048; # strip specific header value and add "..." to the end; set 0 to disable limit
     symbols_nested = false;
     empty_value = "unknown"; # empty numbers, ips and ipnets are not customizable they will be always 0, :: and ::/128 respectively
   };
-- 
cgit v1.2.3