How to generate sosreport for troubleshooting DLP

Products

• Data Loss Prevention

Issue/Introduction

How to generate sosreport for troubleshooting DLP

• What is an sosreport?
  • How do I collect system log files, configuration details and system information from a Red Hat Enterprise Linux system to provide to Technical Support for analysis?

Environment

rhel 6.x, 7.x, 8.x 

Cause

The production server is unable to make changes in a timely manner. The sosreport gives a look into how the rhel system is configured without restarting services or the server

Resolution

How can I generate an sosreport?

Once the sos package has been installed, issue the following command to run sosreport:

Raw

# sosreport

NOTE	The sosreport command requires root permissions to gather data correctly. There is no current mechanism to allow non-root executions of sosreport
NOTE	Starting in RHEL 8, the sosreport command is deprecated in favor of sos report. A message to this affect is output if sosreport is issued on a RHEL 8 system and "Redirecting to 'sos report'" is performed.

The command will normally complete within a few minutes on Red Hat Enterprise Linux 6. Older versions may take longer to complete. Depending on local configuration and the options specified in some cases the command may take longer to finish. If you are concerned about the run time of the sosreport command contact your Red Hat support representative for assistance.

Once completed, sosreport will generate a compressed file under /tmp (for RHEL6 and earlier) or under /var/tmp (for RHEL7 and later). The file should be provided to your support representative (normally as an attachment to an open support case).