Mikko Lehtisalo

IMHO size limits for messages and fields should be documented while at it. There are de facto limits after which Graylog will fail parsing, saving, and indexing messages.

For now it is possible set `gc_warning_threshold = 30s` as workaround.

Couple notes: - RestAccessLogFilter already implements audit logging for REST API - RestAccessLogFilter is typically called by web interface, not the user. Logged IP is that of the web interface....

Here is one attempt: https://github.com/mikkolehtisalo/grl-authen/tree/master It's not a very working approach so I am **not** going to develop it further. The main reasons are that the REST API requires users'...

Failure processing plugin doesn't seem to exist on my system.