Report Agent log retention when Distribution Server is down

Products

• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

Currently, the Report Agent is running in PAMSC Endpoint, and it is configured to send logs to the Distribution Server (DS).
The DS is scheduled to stop for maintenance. Will the logs generated during the DS down period be stored locally? If they will be stored, where they are saved? Furthermore, how the logs will be successfully forwarded to the DS once it is up and running again?

To summarize, please confirm on the following points:

1. Whether the logs generated during the DS downtime will be stored properly locally.
2. If the logs will be stored, where exactly they will be saved?
3. Whether the logs stored locally will be successfully forwarded to the DS once it is up and running again.

Environment

PAMSC 14.1

Resolution

Report Agent sends audit records generated by PAMSC on the local host, it's saved in PAMSC\Log\seos.audit. Report Agent saves offset and other required information in PAMSC\Data\audit2txt\audit2elm.dat.

When DS is down, Report Agent can't communicate with DS through ActiveMQ, so audit log is not being sent. Report Agent will try to communicate with DS periodically. When DS is up, Report Agent continues sending the audit information starting from the offset in  audit2elm.dat.