Since updating to NIS v19.8, I've gotten 2 performance alert messges that I've not seen before. Is this something I should be concerned about?
Well, that is certainly too high numbers. I wouldn't want almost a GB written to my SSD in a short period of time very often for no special reason. No idea what could have caused it, though, and I haven't experienced it myself (yet).
ccSvcHst isn't excluded from Performance Monitoring? It always has been previously.
@killyourtv, Thanks. I haven't heard that before. If that's the case, then it should be the default. I hope someone from Symantec will respond to this.
Hi KBPrez,
Symantec Service Framework is excluded from Performance Monitoring by default:
SendOfJive wrote:Hi KBPrez,
Symantec Service Framework is excluded from Performance Monitoring by default:
@Sendof Jive, THANK YOU! I checked my Program Exclusions and found the 19.7.1.5 version of ccsvchst (see below). I'm not sure how, but I must have fouled it up. I removed it and added the latest version.
Hi KBPrez,
I'm not sure I actually solved anything. Because Symantec Service Framework would not cause an alert in the default settings, I don't think many users have actually seen the activity that you reported - and so have no idea if it is normal or not. I assume that it must be, and if those numbers are usual, I can see why the program would be excluded in order to prevent many alarming Performance Alerts.
SendOfJive wrote:Hi KBPrez,
I'm not sure I actually solved anything. Because Symantec Service Framework would not cause an alert in the default settings, I don't think many users have actually seen the activity that you reported - and so have no idea if it is normal or not. I assume that it must be, and if those numbers are usual, I can see why the program would be excluded in order to prevent many alarming Performance Alerts.
I don't see any way to send an email to Support, so I'll have to repost this. I hope someone from Symantec will see it and can help. Thanks for your help!
Even if it is excluded, those reads and writes are way too high, and having them excluded just increaes the chance of the user not noticing that something might be off.
I have other means of tracking disk i/o and Symantec Service Framework never reaches those numbers. Well, in a 24-hour period maybe, but not in a short enough time it would take to trigger a performance alert.
Thanks Bombastus! I reposted this to the board. Waiting for someone from Symantec to help.
I removed the ccsvchst entry from the Exclusions List, so I'll know if it happens again.
Those Performance Alerts would typically be triggered by a Full System Scan. Check your Security History and compare the date/time of your Full System Scans with the date/time of the Performance Alerts.
elsewhere wrote:Those Performance Alerts would typically be triggered by a Full System Scan. Check your Security History and compare the date/time of your Full System Scans with the date/time of the Performance Alerts.
I got a third alert today. The first two didn't happen during scans. But today's happened during an Insight Scan that I started manually. The scan ran 50 minutes, the longest ever as far as I know. This time the alert was for High Disk Read Usage:
That would be nothing to worry about if it is read activity. That's to be expected in fact.
OK. Thanks!
Thanks KBPrez, but this Norton high disk read/write issue that manifests during a Full system Scan has been present for a couple of years now 
:
elsewhere wrote:Thanks KBPrez, but this Norton high disk read/write issue that manifests during a Full system Scan has been present for a couple of years now
I didn't know about this issue before. For me, the alert msgs started after I updated to 19.8. I don't know how this was designed, but if ccsvchst has a threshold for performance alerts, maybe it needs to be updated by Symantec.