Is 250,000 events a hard limit or an arbitrary cap? We are troubleshooting call issues by using syslogs from a CUBE router. At busy times 250,000 events only covers 60-90 seconds from our device.
Cisco needs the entire call time for analysis and this requires us to send them several different exports of a couple minutes each to get the entire call length.