We have to upgrade our existing DLP 14.5 to 14.6.
Before we upgrade, wanted to know if logs/events generated during upgrade will be lost ?
Events generated during the upgrade will not be lost. The detection servers will act the same as they do during a temporary loss of connectivity i.e. they will store the incidents in a queue and on endpoints they will store up on the endpoint itself. Once the upgrade is complete and connectivity is restored those incidents will flow into the Enforce console.