Shoot... the server deletes the raw access logs every 24hrs. I made a change so it will archive them from now on. Thanks for the tip on how to look up what could be happening.