How to run dtrace using triggers with Enterprise Vault (EV)