Thank you--I may manually extract the gap information and one-shot it from a separate file. I have also discovered that the forwarder did not fail to start with Windows; it seems to have crashed a couple of days later, so I'm guessing the issue is that the data was still being read by some process on the system, but not being forwarded. ... View more

That was what I'd assumed would happen, but the forwarder did not pick up any of the events that were logged into the DNS debug log while the forwarder was down.  There are events all the way back to last week in that log, but only the events that have been added since the forwarder was brought back up are being forwarded.   How do I perform a one-shot? ... View more