+1 with this problem here. I'm on 6.3.
I have a remote syslog configured, this is what I have:
Sep 8 22:18:15 192.168.142.1 system,info,account user admin logged in from 192.168.142.102 via web
Sep 8 22:18:15 192.168.142.1 system,info filter rule removed
Sep 8 22:18:15 192.168.142.1 system,info filter rule removed
Sep 8 22:18:15 192.168.142.1 system,info mac-server interface changed
Sep 8 22:18:15 192.168.142.1 system,info mac winbox setting changed
Sep 8 22:18:15 192.168.142.1 system,info filter rule removed
Sep 8 22:18:15 192.168.142.1 system,info DHCP server lan changed
Sep 8 22:18:15 192.168.142.1 system,info filter rule removed
Sep 8 22:18:15 192.168.142.1 system,info filter rule removed
Sep 8 22:18:15 192.168.142.1 system,info filter rule removed
Sep 8 22:18:15 192.168.142.1 system,info filter rule removed
Sep 8 22:18:15 192.168.142.1 system,info filter rule removed
Sep 8 22:20:15 192.168.142.1 system,info,account user admin logged out from 192.168.142.102 via web
Sep 8 22:26:29 192.168.142.1 system,info,account user admin logged in from 192.168.142.102 via web
Sep 8 22:27:06 192.168.142.1 wireless,info 64:20:0C:39:98:4D@wlan1: disconnected, disabling
Sep 8 22:27:06 192.168.142.1 wireless,info F8:1E:DF:8F:91:31@wlan1: disconnected, disabling
Sep 8 22:27:06 192.168.142.1 system,info,account user admin logged out from 192.168.142.102 via web
Sep 8 22:27:46 192.168.142.1 interface,info ether7-slave-local link up (speed 100M, full duplex)
Sep 8 22:27:52 192.168.142.1 wireless,info F8:1E:DF:8F:91:31@wlan1: connected
Sep 8 22:28:03 192.168.142.1 system,info,account user admin logged in from 192.168.142.102 via web
Sep 8 22:29:24 192.168.142.1 wireless,info C0:65:99:16:E1:BD@wlan1: connected
Sep 8 22:30:33 192.168.142.1 system,info,account user admin logged out from 192.168.142.102 via web
Sep 8 22:30:42 192.168.142.1 system,info,account user admin logged in from 192.168.142.102 via web
Sep 8 22:30:43 192.168.142.1 system,info filter rule removed
Sep 8 22:30:43 192.168.142.1 system,info filter rule removed
Sep 8 22:30:43 192.168.142.1 system,info mac-server interface changed
Sep 8 22:30:43 192.168.142.1 system,info mac winbox setting changed
Sep 8 22:30:43 192.168.142.1 system,info filter rule removed
Sep 8 22:30:43 192.168.142.1 system,info DHCP server lan changed
Sep 8 22:30:43 192.168.142.1 system,info filter rule removed
Sep 8 22:30:43 192.168.142.1 system,info filter rule removed
Sep 8 22:30:43 192.168.142.1 system,info filter rule removed
Sep 8 22:30:52 192.168.142.1 system,info DHCP server lan changed by admin
Sep 8 22:39:11 192.168.142.1 wireless,info C0:65:99:16:E1:BD@wlan1: disconnected, disabling
Sep 8 22:39:11 192.168.142.1 wireless,info F8:1E:DF:8F:91:31@wlan1: disconnected, disabling
Sep 8 22:39:11 192.168.142.1 system,info,account user admin logged out from 192.168.142.102 via web
Sep 8 22:39:53 192.168.142.1 interface,info ether9-gateway-ipv6 link up (speed 100M, full duplex)
Sep 8 22:40:01 192.168.142.1 wireless,info C0:65:99:16:E1:BD@wlan1: connected
Sep 8 22:40:02 192.168.142.1 wireless,info F8:1E:DF:8F:91:31@wlan1: connected
Sep 8 22:40:05 192.168.142.1 dhcp,info lan deassigned 192.168.142.104 from C0:65:99:16:E1:BD
Sep 8 22:40:05 192.168.142.1 dhcp,info lan assigned 192.168.142.104 to C0:65:99:16:E1:BD
Note on this logs, that I restored my yesterday's backup and it vanished again after logging in.
Thanks,
Wagner Sartori Junior