Did you remember to do "broctl install" after you changed the
value of LogExpireInterval ?
How did you guess 
Looking at the command history I see I restarted rather than ‘install’ed
From now on I will do the config changes via puppet the class has now been changed to do an ‘install’ if the bro.cfg ever changes.
Thanks!
R