Group, please check your UTMs snort logs. Could it be for some reason (maybe faulty pattern) snort stopped at around 07:20pm CET on all UTMs? Or would this be just an instance and the others might still run?
I checked it, snort is indeed running but i find it strange that at around this very timeframe all utms would exit some ids instance.