Over a period of time, we see a lot of issues with "Dirxml-Entitlement Result" growing to over 100000 values. We fix it with repair after there is a sync issue. But it would be a good idea to monitor high values outside of iMonitor.
With cn=monitor, I do not see a way to do this. Can high value report be added to cn=monitor or LDAP monitoring?