From 188c517a262d8ebd9752dc0a12acfab73bc4786a Mon Sep 17 00:00:00 2001
From: Ad Schellevis <ad@opnsense.org>
Date: Mon, 11 Nov 2019 21:55:51 +0100
Subject: [PATCH] IDS: eve syslog, lower payload-buffer-size to prevent syslog
 size limit. for https://github.com/opnsense/core/issues/3806

---
 src/opnsense/service/templates/OPNsense/IDS/suricata.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml b/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
index a9227721b..d4fcf6945 100644
--- a/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
+++ b/src/opnsense/service/templates/OPNsense/IDS/suricata.yaml
@@ -135,7 +135,7 @@ outputs:
         - alert:
 {%     if not helpers.empty('OPNsense.IDS.general.LogPayload') %}
              payload: yes
-             payload-buffer-size: 100kb
+             payload-buffer-size: 4kb
              payload-printable: yes
 {%     endif %}
              http: yes