If an agent is disconnected from the network, such as a laptop working offline, agents continue to monitor and protect the disconnected machine. After the machine reconnects, the agent uploads offline incident logs to the management server. Offline incidents are then counted in the DLP Incidents summary charts and reports.

If an offline agent log uploads after a Summary report runs, you can go to Reports → Generate Reports to run a one-time report for the latest information.