I am at loss, and grasping at straws.
Single Management (VMware Open Server) server was upgraded from R81.10 to R81.20. Since then I am seeing partial log entries when using the Logs view from Logs & Monitor.
The ONLY way to view full log entries is when I open specific log files.
I am getting some http/s logs from one GW.
I am getting AD query & IPS logs from another GW(Main office), but nothing else.
Answering as many question as I can to give a full picture
All four gateways are sending their logs to this mangement server and their fw.log is NOT growing
Since I am seeing logs entries from gateways when manually opening log files, I say sk40090 DOES NOT apply
I don't think sk112162 applies either since teh GW's are not logging locally
I have no remote log servers.
Support is unable to replicate using my config and DB, so they suggested rebuiliding the VMware open server.
I have done this and still the same problem.
$RTDIR/conf/logServerConfig.xml is only showing the one IP and is the one I am expecting.
df -h /var/log = 793G free (since I rebuilt the server)
I have pushed policy on all GWs and installed DB on management
SIC status is "Communicating"
Apparently for Support the next step is R&D, but I am worried this is going to take a really long time.
Does anyone have any ideas? Willing to try even the craziest idea at this point.