Log data is queued to a disk in a store and forward mechanism. The agent and the appliance will store to the disk, as well as the AIC. In the event of transport loss to the Alert Logic® cloud, data will queue to the disk until the disk is full; then, it will start to lose data. Depending on the size of the disk, this can be many hours.
Note: Log data is not encrypted at rest on the disk–only in transit.