Just to clarify, you are saying that your MC was offline for a few hours and so the CSA clients did not report their events to the MC during that time. But when you look at the event log on the client host, you see events for CSA. And you want to know how to get those events to the MC?
Please correct me if I completely missed the boat.
No the MC was up the whole time. We log alerts to another share, and sometimes it'll lose connection or something, so I can still see the events in the MC, but they weren't logged. If possible I need to get those alerts logged to file after the fact.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...