topic Re: Best way to remove core dump files in General Topics

Best way to remove core dump files

Sajid_Abbas — Fri, 02 Jun 2023 04:17:16 GMT

Hi,

We're runnign frequent health check reports and see errors for core dump files created long time back. I want to know whats the best way to remove them so the report comes out clean. These are the core dump files on Gateways and Management server.

Sajid

Re: Best way to remove core dump files

Ruan_Kotze — Fri, 02 Jun 2023 06:37:23 GMT

Hi Sajid,

Just delete them in expert mode - They reside in /var/log/dump/usermode/

You could also schedule a cron job to do that periodically.

Thanks,
Ruan

Re: Best way to remove core dump files

the_rock — Fri, 02 Jun 2023 16:00:11 GMT

@Ruan_Kotze is 100% right. Below is an example from my lab.

Andy

You can also do this:

quantum-firewall> set core-dump
quantum-firewall> set core-dump disable
CLINFR0519 Configuration lock present. Can not execute this command. To acquire the lock use the command 'lock database override'.
quantum-firewall> lock database overri
quantum-firewall> lock database override
quantum-firewall> set core-dump disable
quantum-firewall> save config
quantum-firewall> show core-du
quantum-firewall> show core-dump
per_process - show dumps amount limit per process
status - show enable / disable status of core-dump
total - show total space usage limit
quantum-firewall> show core-dump stat
quantum-firewall> show core-dump status
Core dumps disabled
quantum-firewall>

Re: Best way to remove core dump files

G_W_Albrecht — Mon, 05 Jun 2023 15:16:56 GMT

This is only true for processes in usermode - kernel crash dumps are located in /var/log/crash/<date>/vmcore, see sk44186: Enable generation of kernel core dump file on Check Point Security Gateway on SecurePlatform / Gaia and sk92764: Core Dump Manager (CDM) for User Mode core dump files in Gaia OS for details.