Historic Logs stored on the local disk in the antique format that Sophos UTM has in the directory /var/log. like fwlog00-00-0000 where the first is the day, next month and year. stored by day and the capacity to export those logs to an external disk.

The actual format of the XG is not confortable because all the logs is purged by day.

This feature is important to store all historic conntrack information and the others module logs, like IPS, WAF, EMAIL, WIRELESS, etc.