We recently transitioned from MOVe AV multiplatform to MOVE AV Agentless and we started seeing issues with certain programs having delays and degraded performance. We were able to remove the issues when the machines were migrated to a host without vShield and an active SVA attached.
In order to find the source of this issue and create the appropriate exemptions, I need to see what is being scanned. However, I cannot find any log data on files and processes that are successfully scanned, I only see entries for failed scans and detections in the EPO event log.
Where do I need to look for the appropriate logs?