Does Symantec CSP lose event data when the agent computer is off-line?
No, the event data is not lost. Initially, the agent driver stores the events and other activity in log files on the local computer. When the agent computer is not connected to the network or otherwise cannot connect to the manager, the agent keeps that data and other activity information in the logs. When the agent re-establishes a connection to the management server, it sends the data and other activity information.