Searching multiple archived logs

[richard_lloyd]

Running Gaia R80.30 cluster (5800 appliances), with VMs running Manager and SmartEvent.

I've been asked to search 9 months worth of logs.
I spun up a new VM for Logging and SmartEvent, copied across and un-archived the logs.

I can load and search these individually, but that's 270 days with 10-14 logs files per day.

I can't find a way to search the full time range in 1 go, but surely there must be one?

Does anybody know how it can be done?

[PhoneBoy · Accepted solution]

Did you do anything to reindex the logs?
By default we only index back…one day, I think (on a fresh install).