Jon if you're looking on the usual log databse this is likely just the ~30 hours of lag. EventLogging was recently switched over to write to db1048 instead, and then federate to db1047 for analysis purposes (if I'm describing that correctly). 

--