How to disable core dumps on an RSA Security Analytics Concentrator

Issue

Sometimes core dumps are created which results in filling up the disk space, which could crash the service and prevent it from being started again.  Some customers require the creation of core dumps to be disabled.

Tasks

This article provides the steps necessary to prevent core dumps from being created.

Resolution

To disable core dumps on a Concentrator appliance, perform the steps below.

1. Connect to the Concentrator via SSH as the root user.
2. Issue the command below and take note of the output.
   grep "limit core" /etc/init/nwconcentrator.conf
   limit core unlimited unlimited
3. Issue the command below to edit the configuration file.
   vi /etc/init/nwconcentrator.conf
4. Change the line in step 2 to be the following:  limit core 0 0
5. Restart the Concentrator service for the change to take effect by issuing the command below.
   restart nwconcentrator

Product Details

RSA Product Set: Security Analytics
RSA Product/Service Type: Concentrator
Platform: CentOS
O/S Version: EL5, EL6

Summary

This article deals with how to disable core dumps and prevent them from being created on a Concentrator appliance.

Approval Reviewer Queue

ASOC Approval Group