Thanks dear for your valuable reply. But i am getting logs of previous dates too locally saved. Now i have created saperate files for USER traffic logs and also Turned-OFF NTP. USER, and Interactive-commands " messages" files. This will keep the files from growing too large and ultimately over-riding the previous logs of interest.
And will try to find out process SYSTEM_ABNORMAL_SHUTDOWN.
archive size 100k files 3;
user * {
any emergency;
}
file messages {
any info;
authorization info;
ntp none;
user none;
interactive-commands none;
archive size 640k files 10;
explicit-priority;
}
file interactive-commands {
interactive-commands error;
}
file TRAFFIC-LOG {
user info;
archive size 320k files 5;
explicit-priority;
}
Please suggest a betterway if possible to keep the logging more accurate.