I found the problem, Juniper changed the local logging to be used in stream mode instead of event mode after 15.1X49-D100. This is stated in this KB https://kb.juniper.net/InfoCenter/index?page=content&id=KB32479&pmv=print&actp=METADATA&searchid=&type=currentpaging
i was enabling event mode and expecting it to do local logging. I will make it stream mode according to the KB
thanks