Action Required: JSONL/CSV Uploads failing with "The data value transmitted exceeds the capacity limit" after 20251219 release

[jkppr]

Hi Timesketch Users,

If you've updated to the 20251219 release and are experiencing errors when uploading JSONL or CSV files larger than approximately 500KB, this notice is for you.

Symptoms:

Uploads fail with the API error:

{"message": "The data value transmitted exceeds the capacity limit."}

Cause:

The 20251219 release includes an updated version of the Werkzeug library. This new version has a lower default limit for the maximum size of form data, which affects file uploads.

Resolution:

We've introduced a new configuration option in timesketch.conf to allow you to adjust this limit. However, this change requires a manual update to your existing configuration file.

To fix this:

1. Edit your timesketch.conf file.

2. Add or update the MAX_CONTENT_LENGTH setting. You can see the default setting in the origin configuration file. Choose a value suitable for your needs (the value is in bytes).

3. Save the timesketch.conf file.

4. Restart your Timesketch Docker containers for the changes to take effect.

This will restore the ability to upload larger files.