Maybe some of you are using the new field "severity:" for searching for Anti-Bot events in SmartLog
Please be aware that this new field is broken for Anti-bot in R77.20. Will be solved in R77.30

Workaround:
In the list of fields that should be index, add also the severity with lower case (I checked the workaround)

1) cd $SMARTLOGDIR/conf
2) Backup the smartlog_settings.conf
cp smartlog_settings.conf original_smartlog_settings.conf


3) Edit smartlog_settings.conf

Add the red highlighted code
..
:product_family (
:index_name (ProductFamily)
:tokenize (true)
)
:severity (
:index_name (severity)
:tokenize (false)
)

:Severity (
:index_name (severity)
:tokenize (false)
)
)
.

4) smartlogstop ; smartlogstart