Where to Find DLP Agent Crash Dumps on Red Hat 8.x

Products

• Data Loss Prevention Core Package
• Data Loss Prevention

Issue/Introduction

By default, DLP Agent crash dumps are typically located in the "MemDumpFiles" directory under the agent installation path (/opt/Manufacturer/EndpointAgent/MemDumpFiles). However, in RHEL 8.x, the default crash dump location has changed.

Environment

RHEL 8.x

Cause

On RHEL 7.9, crash dumps are handled using the ABRT tool, whereas on RHEL 8.x, they are handled using systemd-coredump.

Resolution

The default crash dump location in RHEL 8.x is:
/var/lib/systemd/coredump