@rpayne quoting what you said "but some users can only see 24 hours back when the actual log goes back 12 days."
Q1-By this do you mean there is a way to see that 12 days log?Do you mean that for the same sysdiagnose file ,some users see more information than others?
Q2-If you can only see 24hr info then how do you know it collected data for 12 days?
please answer this
I need help with this thing