Hi Paul and all,
In R80 there is an easier way to see what is happening both in the log server and regarding Indexing.
You can run:
cpstat mg -f log_server
This will display information about logs currently received from GWs.
cpstat mg -f indexer
This will display the current state of the indexing
In case of dedicated Log Server or SmartEvent replace the mg with ls.
In general logs should be displayed once they are indexed in the system regardless if there are many other logs that are still not indexed.
Amir