CONTAP-365158: ARP snapshots are auto-deleted within 30 mins
Issue
- 'security anti-ransomware volume show' output 'Attack Probability: none' even though EMS log reports 'arw.activity.seen' alert
- The affected volume did not display a list of suspicious extensions
- ARP snapshots are auto-deleted within 30 mins:
Tue Dec 17 2024 11:30:03 +09:00 [kern_mgwd:debug:2927] Snapshot Anti_ransomware_backup.2024-12-17_1119 deleted. vol = vol01