Configuring creation of dump files

This Help provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

To configure creation of dump files in Kaspersky Endpoint Agent using the command line interface:

1. On the device, run a command line interpreter (for example, Command Prompt cmd.exe) with the permissions of the local administrator.
2. Using the cd command, navigate to the folder where the Agent.exe file is located.

   For example, you can type the following command cd "C:\Program Files (x86)\Kaspersky Lab\Endpoint Agent\" and press ENTER.

3. Enter one of the following commands and press ENTER:
   • agent.exe --dump=enable --folder <path to the folder where you want to create dump files> to enable creation of dump files.

     Creation of dump files will be enabled for all Kaspersky Endpoint Agent processes that are currently running. Dump files will be created in the folder you specified.

     Make sure that the specified folder is available on the managed device. Otherwise, dump files will not be created.

   • agent.exe --dump=disable to disable dump creation.

     Creation of dump files will be disabled for all Kaspersky Endpoint Agent processes that are currently running.

   • agent.exe --dump=show to view the current dump creation status and the path to the folder with the dump files.

     The values of the dump.enable (true, if creation of dump files is enabled or false, if creation of dump files is disabled) and dump.folder (path to the folder) settings are displayed.

Return codes of the --dump command:

• -1 – command is not supported.
• 0 – command successfully executed.
• 1 – required argument is not passed to the command.
• 2 – general error.
• 4 – syntax error.
• 5 – object not found (could not find the specified path to the dump files folder).
• 9 – invalid operation (for example, an attempt to execute the --dump=disable command, if creation of dumps is already disabled).