arw.auto events
arw.auto.switch.enabled
- Severity
 - 
NOTICE
 - Description
 - 
This message occurs when anti-ransomware has been automatically switched from learning mode to enabled after various conditions have been satisfied, such as learning period, file creation, file write, and file extension discovery activities.
 - Corrective Action
 - 
(None).
 - Syslog Message
 - 
Anti-ransomware has been automatically switched from learning mode to enabled on volume "%s" in SVM "%s".
 - Parameters
 - 
VolumeName (STRING): Name of the volume.
VserverName (STRING): Name of the SVM.
LearningPeriod (INT): Number of days needed for learning.
IncomingWrite (INT): Amount of write (in MB) received during Learning mode.
DurationWithoutNewExtension (INT): Number of days without a new file extension being discovered.
FileCount (INT): Number of new files created in a volume.
FileExtensionCount (INT): Number of new file extensions discovered in a volume.