Data being discarded due to different timestamp from the FMS to the Fglam client that is sending the collected data over. Any way to get this data back? How to be alerted when this happens?
Once the FMS marks the data to be discarded, it is discarded - there is no way to get this back.
Make sure the clocks are synched up on all Fglams and FMS to prevent this.
A notification can be sent if data is being discarded for this reason by enabling a Core Monitoring Policy rule called "Catalyst Data Service Discarding Data" which sents alarms to the console. The Alarm message reads: