Steps to collect core dumps from Symantec Endpoint Protection (SEP) 14.3 RU1 and above Linux agent.
SEP 14.3 RU1 and above
To collect core, follow below steps
pgrep sisamddaemon
kill -SIGILL <PID>
And it should be available in
/opt/Symantec/sdcssagent/AMD/bin/
Also share below folders from the machine after generating dump
/var/log/messages
/var/log/sdcsslog/
/opt/Symantec/sdcssagent/AMD
/etc/sisips/