Long Syslog messages getting dropped
I am running Debian Squeeze 6.0.5.
Currently The Debian server is set up as a central syslog server receiving syslog messages from other Linux (fedora, debian, RHEL, CentOS, etc.) and from some Windows Servers.
The syslog messages from the Windows Servers are being sent via Snare.
We have recently noticed that the longer messages from the Windows Events are not being received in syslog. Any events that seem to be a certain length are just dropped and never reported.
If I configure Snare to send these messages to our CentOS 5.1 server, the messages are received, but they are cut off at a certain length (but contains the vital info). I can just have my central syslog server be the CentOS server, but this isn't ideal, as i have many servers already pointing to the Debian one.
Is there anything I can do on the Debian syslog server to ensure that these messages are received, or even cut off like the ones in CentOS?