How to find messages which are truncated by size?

Hello, we have default size for maximum message size

max_line_size: 128kb

and in exported metrics I see constant rate of:


How can I find events with long lines?
I’ve read all the PromQL documentation and only came up with:

{cluster="eks-af-south-1"} |~".{1000,}"

which returns events >1k in size. But there are too many of such events, and it is the maximum regex value, so I cannot make it ".{100000,}" as it is the syntax error.
What are my options in searching for events which are getting truncated?

Found another option:

{cluster="eks-af-south-1"} | label_format len=`{{ __line__ | len }}` | len > 10000