LOGEVENT_BUFSIZE
if (ev_sz > LOGEVENT_BUFSIZE) {
eventbuf[i] = malloc(LOGEVENT_BUFSIZE);
size = sysevent_get_size(ev) > LOGEVENT_BUFSIZE ?
LOGEVENT_BUFSIZE : sysevent_get_size(ev);