现象描述:

DN打日志正常,但进程却挂掉了,查看/var/log/messages日志中,当时出现abrt-hook-ccpp的日志:

 Jun 21 07:05:06 XXX-XXX-8152 abrt-hook-ccpp: Saved core dump of pid 10066 (/software/servers/jdk1.7.0_67/bin/java) to /var/tmp/abrt/ccpp-2016-06-21-07:04:59-10066 (912011264 bytes)
Jun 21 07:05:07 XXX-XXX-8152 abrt-server: Executable '/software/servers/jdk1.7.0_67/bin/java' doesn't belong to any package and ProcessUnpackaged is set to 'no'
Jun 21 07:05:07 XXX-XXX-8152 abrt-server: 'post-create' on '/var/tmp/abrt/ccpp-2016-06-21-07:04:59-10066' exited with 1
Jun 21 07:05:07 XXX-XXX-8152 abrt-server: Deleting problem directory '/var/tmp/abrt/ccpp-2016-06-21-07:04:59-10066'

在日志中可以发现无法创建ccpp文件,需要设置

How to enable handling of unpackaged software
Edit /etc/abrt/abrt-action-save-package-data.conf and change ProcessUnpackaged = no to ProcessUnpackaged = yes

# sed -i 's/ProcessUnpackaged = no/ProcessUnpackaged = yes/' /etc/abrt/abrt-action-save-package-data.conf

这时,你可能还需要设置coredumpsize unlimited才能看到超过1000M的文件

参考文章:

CentOS讨论

abrt常见问题

abrt 產生的 core dump 不見了?