One of the features listed with the Secure Tunnel client is that it will buffer syslog messages until the connection with the Kiwi Syslog Server comes back up. We have a case where the Kiwi Syslog server service apparently stopped (without generating an Event Log entry, curiously, still looking into that one) and when the service came back up, no buffered logs appear to have been passed to it, even though the client reports over 400 syslog messages and has not restarted in over a year.
