Our syslog stopped working and we fixed it by collector and analyzer restart.
But I noticed that the new syslog report does not have the syslog information for the last two days.
Does the syslog starts working again, will it not collect the information from where it stopped last from syslog.log.
Is there any other possiblities and issue which can cause this?
Is there a way I can force syslog to pick those entries from syslog.log for missing 1 or 2 days after collector and analyzer restart?
As it has happened twice.