Issue:
Elements Connector unable to forward logs with error "Message too long".
Resolution:
This typically occurs when trying to send a UDP packet that exceeds the maximum allowed size.
UDP has a maximum payload size of 65,507 bytes (65,535 bytes total - 8 bytes for UDP header - 20 bytes for IP header). However, likely the SIEM system has some smaller limit. It’s recommended instead to use TCP protocol for the event forwarding. It’s overall more reliable. This can be configured in the Elements Connector’s profile.