Environment
- All Products
- Red Hat: All supported versions
- CentOS: All supported versions
Objective
To enable and configure Kdump for Linux kernel crash dump collection
Resolution
The Kdump service is installed and enabled by default on newer RHEL 7+ systems |
- Check if kexec is installed and kdump is active
rpm -q kexec-tools
systemctl status kdump.service
- Enabling Kdump
- Enable and start the kdump service:
systemctl enable kdump.service
systemctl start kdump.service
- Once a system crash occurs, please zip any vmcore dump files from their default location:
tar cvfz /tmp/crash-logs.tgz /var/crash
- If the vmcore files are missing, please check if the path for writing crash logs has been modified in the config file: /etc/kdump.conf
Additional Notes
The steps enable Kdump with default options; to customize Kdump please check the following
Red Hat KB
#EndpointStandard#AppControl#EDR#CarbonBlackCloud#EnterpriseEDR