Failed to process keystroke log file: forwarded from master in /var/log/messages from the client (4265871)

RESOLUTION 1: 

1 - On the client: run ls -l  /var/opt/quest/qpm4u/offline/event_logs

 B - Look for a zero byte file such as the following:

-rw-r-----    1 root     system            0 Sep 22 21:01 eventlog.xxxxx

2 - Run an lsof command to check that no pmmasterd processes are writing to these files.
e.g
lsof <full path to file>

3- If the output shows that the files are not open, it should be deleted. 

rm < full path to file>

Other things to check:

1 - Check if the pmlogsrvd daemon is running on  policy server

2 - Check if  there are any error messages in the pmlogsrvd.log file