Pending Data Collection Files
When communication failures occur between agents and the server — due to firewall blocks, network interruptions, or application restrictions — the locally collected data cannot be immediately transmitted.
In these situations, the agent creates pending collection files, which remain encrypted in the log directory until communication is restored. Each file represents a data collection point awaiting transmission to the server.
Types of Collection Files
.ard – Stuck Collections Received by the Relay
Files with the .ard extension represent collections received from other devices by the Relay.
These files remain temporarily stored when the Relay cannot establish communication with the central server.
Once connectivity is restored, the Relay automatically processes and forwards the pending collections.
.cdz – Stuck Collections Generated by the Agent
Files with the .cdz extension represent collections generated directly by the agent installed on the device.
They are created when the agent fails to send the collected data to the server or Relay due to communication issues.
After connectivity is normalized, the agent automatically sends these collections to the configured destination.
Note
Both file types remain encrypted to ensure data integrity and confidentiality during the local retention period.
