So, we are evaluating "System Center 2012 Endpoint Protection" -- which is Microsoft's purchase/rebranding of ESET.
We are finding that having the "Real-Time File System Protection" enabled -- even with Tools --> Logs -- Computer Scan Log Records Default Filter having all checkboxes disabled that the "scep_daemon" is logging an excessive amount of data when users are running Mail.app, Safari, Calendar, etc...
(example):
scep_daemon[310]: summ[01360a00]: vdb=17694, agent=fac, name="/private/var/folders/n1/zbkcr0gx585dmtnqh13gnpv8m7xf9l/T/com.apple.mail/TemporaryItems/(A Document Being Saved By Mail 2)/BackingStoreUpdateJournal", virus="", action="", info="Event occurred on a newly created file.", avstatus="not scanned", hop="accepted"
However, I'm not here to ask about SCEP.
But, noticing the above, we got a trial version of ESET 6.0.9.1 -- and we are seeing the same excessive logging (this time with esets_daemon) in system.log for the same actions (so it's not specifically an SCEP problem...)
is there a way to disable this excessive logging to system.log with the RTFSP enabled? This excessive logging generates a ton of noise when we are looking into system.log for other things.
Thanks!