Headers are being truncated

[corlaneduard97]

HI there 

to better debug some emails, we have implemented an Incoming Content Filter to display all the headers of every email that goes through the ESA. (according to the topic described here https://community.cisco.com/t5/email-security/logging-all-headers/td-p/3010593) We saw that now all the emails have a Custom Log Entry field describeing the headers of the email, but it is truncated after some bytes. We found on another topics that there is a limitation of 1024 bytes on this field. Is there any way to remove/bypass that limit ? It's a pity to not be able the see all the headers of an email. 

Thanks in advance! 

[betliu]

You can go ahead and change the maximum size of the message from 1024 up to 65535,

Path: System Administration>Log Subscription>select the logs which were truncated>Retrieval Method: syslog push==>change 'Maximum Message Size' from 1024 bytes to 65535 bytes.