coredumpctl — Retrieve coredumps from the journal
coredumpctl
[OPTIONS...] {COMMAND} [PID|COMM|EXE|MATCH...]
The following options are understood:
--no-legend
¶Do not print the column headers.
-1
¶Show information of a single coredump only, instead of listing all known coredumps.
-F
, --field=
¶Print all possible data values the specified field takes in matching coredump entries of the journal.
-o
, --output=FILE
¶Write the core to
FILE
.
-h
, --help
¶--version
¶--no-pager
¶Do not pipe output into a pager.
The following commands are understood:
List coredumps captured in the journal matching specified characteristics. If no command is specified, this is the implied default.
Show detailed information about coredumps captured in the journal.
Extract the last coredump
matching specified characteristics.
The coredump will be written on standard output,
unless an output file is specified with
-o/--output
.
Invoke the GNU debugger on the last coredump matching specified characteristics.
A match can be:
PID
¶Process ID of the process that dumped core. An integer.
COMM
¶Name of the executable
(matches COREDUMP_COMM=
).
Must not contain slashes.
EXE
¶Path to the executable
(matches COREDUMP_EXE=
).
Must contain at least one slash.
MATCH
¶General journalctl predicates (see journalctl(1)). Must contain an equal sign.
On success, 0 is returned; otherwise, a non-zero failure code is returned. Not finding any matching coredumps is treated as failure.