savecrash: Insufficient space to save full core dump

[anat heilper]

Hi, one of my servers went down, and o nthe INDEX file of the crash I got the following error: savecrash: Insufficient space to save full core dump
only the vmunix is generated without an image file.
Is there some information that I can still retrieve from that vmunix file ( I can't open it on kwdb nor at adb)
Thanks,
Anat

[Prashanth.D.S · Accepted solution]

Hi Anat,

Nope you cannot do anything with just a vmunix file. You must have a complete crash dump including the INDEX file for further analysis...

I would suggest to increase the dump space and run #savecrash -r command to do a dump again...

Best Regards,
Prashanth

[whiteknight]

anat,

this indicated your dump space is insufficient, please increase your dump size

WK

[Sp4admin]

As stated above you will need to increase your dump size. if you don't have space you my need to cretae a external volume group and mount point.

sp,

[Nick W]

Anat,

When a system crashes there must be sufficient space on the dump lvol to capture the contents of the memory (as dictated by the output of crashconf -v).

During the subsequent system startup, the contents of the dump lvol need to be saved off to a filesystem (default location is /var/adm/crash) using savecrash (happens automatically as part of startup script).


I believe your issue is insufficient filesystem space. You could attempt to resave the crashdump into another filesystem with lots of free space (if the swap and dump lvol are the same, then there is a distinct possibility that the crashdump may have already been written into, thus corrupting the crashdump...)

try:
cd /filesystem/with/lots/of/space
savecrash -r . <---- note the 'dot' at the end - saving into current directory.

With luck this should have resaved your crashdump


Bottom line:
1. ensure you have sufficient space in your dump lvol (going down)
2. ensure you have sufficient filesystem space to save off the crashdump (coming up)


Regards,
Nick 'dubya'

PS: please remember to assign points for the responses so far.

[Franky_1]

Hi Anat,

another suggestion :
If you're low in disk space just change the path for your crashdump in /etc/rc.config.d/savecrash

Regards

Franky

[anat heilper]

Thanks,
Anat