I frequently receive low water mark and high water mark error messages from our datamovers.

Mar 21 07:39:22 2014 DART:VC:ERROR:2 Slot 2: 1395409154: Vnode  high water mark reached.

Is there a way to observe the file scanning activity in real-time or view historical statistics?

I'd like to use this information to establish a more accurate AV exclusion file for the datamovers.

Thanks!

Environment Overview

• 4x datamovers running v7.1.71 DART, 24 CIFS filesystems, 30TB of unstructured data.
• 7x scan servers, McAfee v8.8, and VEE v4.9.3 (upgrading to CEE v6.3.1 this month)
• virus checker configuration file settings: (We're aware that EMC doesn't recommend masks=*.* our security team requires it)

masks=*.*

excl=*.ldb:*.mad:*.maf:*.mam:*.maq:*.mar:*.mat:*.mda:*.mdb:*.mde:*.mdn:*.mdw:*.mdz

excl=*.inp:*.orc:*.sc:*.sqc:*.sql:*.sqr

excl=*.edb:*.ost:*.pst:*.stm

excl=*.db:*.dbf:*.gdb:*.fmt:*.fmb:*.fmx:*.frm:*.ora

excl=*.bz:*.gz:*.rar:*.tgz:*.tar:*.zip:*.Z

excl=*.adl:*.gdbtable:*.gdbindexes:*.gdbtablx:*.lock:*.prj:*.sbn:*.sbx:*.shp:*.shx

excl=*.index:*.db-journal:*.log:*.nsf:*.tmp:*.vmdk:>>>>>>>>:~$*.*:*.dbx-journal