I have a Redhat Enterprise Linux 6 sytems with the VSE 'nails' daemon installed v1.9. On-access scanning is enabled. I want to see a list or a log of all the files that the nails daemon has scanned. I can see the 'scanner' process running, but I don't know what files it is scanning. One of my java/tomcat apps is running slowly and after I stopped the nails daemon, the app immediately started being responsive again. If I could view exactly what files, processes, & executables, the scanner was touching, I might be able to figure this out. Can the logs tell me this info? If so, where is it? Thanks in advance for the help!
do you have the webui installed for vsel or is the server epo managed? if so you can enable sys logging and set the level to high. check to write to sys log and that will record every scan to the /var/log/messages file.
to see what files are getting scanned look for scanmanager in the log
another thing to do is to either add this exclusion /.*.jar or uncheck to decompile archive files.