Hi, we had the problem that our core server was poorly accessible for about 5 hours due to network problems. So all remote probes were not able to transfer data correctly or at all to the core server. Now we have a gap on the core server over this 5 hours on all sensors. I thought that the remote probes are caching it's data for that 5 hours and submit the cached data when the core server is reachable again. One remote probe has 5 Sensors with low frequented scanning interval (30 seconds for NetFlow V9, SNMP Traffic and Core/Probe Health, 30 minutes for 2 windows services), so there's not much data to cache I guess. Currently we have 70 Remote Probes online.
Any Ideas why the missing data in the mentioned 5 hours was not cached by the remote probes?