I noticed that when I a restart bro using the cluster command that the current manager logs are not saved. What end up in the logs directive is data for only a few minutes as if bro reopened the logs before terminating.
Could some verify that bro work properly under bsd.
I am running bro under linux and suspect that this is only a problem under linux and not bsd.
Bill Jones