Issue This request for enhancement represents some customers' request to engineering to tone the following ARW alert down, which was modified via bug: CONTAP-105091: The meaning of the EMS event “call...Issue This request for enhancement represents some customers' request to engineering to tone the following ARW alert down, which was modified via bug: CONTAP-105091: The meaning of the EMS event “callhome.arw.activity.seen” is unclear Current alert format: ALERT callhome.arw.activity.seen: Call home message for POSSIBLE RANSOMWARE ACTIVITY DETECTED, Volume: testvol_2 (UUID: df60d07f-f6f9-11ee-bea9-0050568ecb34) in Vserver: vs_1 (UUID: adaa988b-f6f9-11ee-bea9-0050568ecb34)