Unfiltered log doesn't show all entries

Hi All,

I have been trying to diagnose a problem with an Azure S2S VPN connection and have found what appears to be an issue in the log filter on the Sophos XG.

I am running an XG125 (SFOS 17.5.5 MR-5)

The problem is:

I have an IPSEC tunnel running to azure and it is called Azure_Tunnel.

For some reason, the tunnel drops out intermittently anywhere between 1 and 8 hours after it is connected (I will be putting this in as another question or possibly I will go straight to the support team).

So, to try and diagnose the issue, I filtered the logs down to those entries with "Azure" in them. OK, now I can see that Azure tunnel Connecting and Disconnecting. However I cannot see anything around those log entries to tell me why. So, I though, I will look at the logs without any filter to see what was going at the time the Logs says that the tunnel was disconnected.

Looking through the unfiltered logs at the Date and Time of the disconnections shows no logs at all - not even the log of the Azure tunnel disconnecting, which I can see if I filter down to "Azure".

Is there something I am missing here or do the logs simply not work the way I expect them to?

Thanks

Regards

Mike