3.1 Ensure a centralized location is configured to collect ESXi host core dumps

Information

The VMware vSphere Network Dump Collector service allows for collecting diagnostic information from a host that experiences a critical fault. This service provides a centralized location for collecting ESXi host core dumps.

Rationale:

When a host crashes, an analysis of the resultant core dump is essential to being able to identify the cause of the crash and determine a resolution. Installing a centralized dump collector helps ensure that core files are successfully saved and made available in the event an ESXi host should ever panic.

Solution

To implement the recommended configuration state, run the following ESXi shell commands:

# Configure remote Dump Collector Server
esxcli system coredump network set -v [VMK#] -i [DUMP_SERVER] -o [PORT]
# Enable remote Dump Collector
esxcli system coredump network set -e true

See Also

https://workbench.cisecurity.org/benchmarks/8020

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-6(3), CSCv7|6.5

Plugin: Unix

Control ID: b125fdd338c6f7d99dc60f3b08ec4433b57384e528cf445985d3896c5bed2b9a