Oui, j'ai besoin d'une solution
From time to time I see messages in our monitor app about EV not being able to recall placeholders. Usually its not a couple but the whole archived content of a folder.
Had a look at this article and proposed a change to exclude TrendMicro AV.
http://www.symantec.com/business/support/index?page=content&id=TECH51039
Since this article hints on how to find what process requested the recall, the request for change as was denied with the comment to do the DTrace part first. I've been doing some tests but not sure how to extract the process from the log.
Any ideas on how to find this info?