not blocked category logs were sent to the our syslog server

[User37602025]

we are not receiving the same logs we used to receive at syslog server (splunk) after the upgrade few days ago I see this error in the logs , and had followed the knowledge base ,as well ,

[User37602025]

just to add the error I saw

Journal has been rotated since unit was started. Log output is incomplete or unavailable.

[mkutrieba]

Unfortunately, I do not know this error and could not find anything. Nevertheless, configuration (Log handler, rsyslog.conf etc. needs to be checked which is to sensitive information for community. I guess there are further error messages somewhere which could help.

Therefore I think it is the best idea to open a ticket with support including a more detailed description and attach a feedback file as per:
1) Navigate to "Troubleshooting" > select the MWG you are testing on > "Feedback"
2) Keep the option "Pause running McAfee Web Gateway to create a backtrace (recommended)" enabled (this will NOT stop any service!)
3) Click the "Create Feedback File" button. This way we get your policy, configuration and debug information.
Via CLI:
# /opt/mwg/bin/feedback.sh -l 2

[User37602025]

Thanks , I will create backtrace file  and create a ticket