coredumpctl (1) - Linux Manuals

coredumpctl: Retrieve coredumps from the journal

NAME

coredumpctl - Retrieve coredumps from the journal

SYNOPSIS

coredumpctl [OPTIONS...] {COMMAND} [PID|COMM|EXE|MATCH...]

DESCRIPTION

coredumpctl

may be used to retrieve coredumps from systemd-journald(8).

OPTIONS

The following options are understood:

--no-legend

Do not print column headers.

-1

Show information of a single coredump only, instead of listing all known coredumps.

-F, --field=

Print all possible data values the specified field takes in matching coredump entries of the journal.

-o, --output=FILE

Write the core to FILE.

-h, --help

Print a short help text and exit.

--version

Print a short version string and exit.

--no-pager

Do not pipe output into a pager.

The following commands are understood:

list

List coredumps captured in the journal matching specified characteristics. If no command is specified, this is the implied default.

info

Show detailed information about coredumps captured in the journal.

dump

Extract the last coredump matching specified characteristics. The coredump will be written on standard output, unless an output file is specified with -o/--output.

gdb

Invoke the GNU debugger on the last coredump matching specified characteristics.

MATCHING

A match can be:

PID

Process ID of the process that dumped core. An integer.

COMM

Name of the executable (matches COREDUMP_COMM=). Must not contain slashes.

EXE

Path to the executable (matches COREDUMP_EXE=). Must contain at least one slash.

MATCH

General journalctl predicates (see journalctl(1)). Must contain an equal sign.

EXIT STATUS

On success, 0 is returned; otherwise, a non-zero failure code is returned. Not finding any matching coredumps is treated as failure.

EXAMPLES

Example 1. List all the coredumps of a program named foo

# coredumpctl list foo

Example 2. Invoke gdb on the last coredump

# coredumpctl gdb

Example 3. Show information about a process that dumped core, matching by its PID 6654

# coredumpctl info 6654

Example 4. Extract the last coredump of /usr/bin/bar to a file named bar.coredump

# coredumpctl -o bar.coredump dump /usr/bin/bar