Public search query: SIEM forwarder crashed error buffer full alerts lost during spike failure