we’ve some tested this before. when the communication stopped not based on client/agent, it will communicate and send all logs saved on its database to kolide fleet after communication established. (also you should look at the flags that provides the logs keep on the database for a certain time for example: for event based tables (windows_events) events_max flag ) @Darren