To analyze and troubleshoot issues related to Trellix Agent on non-Windows systems, you must provide the following:
- Minimum Escalation Requirements (MER) files.
- For memory issues, use the command sudo vmap.
- For CPU-related issues, provide the output of the top command.
Individual non-Windows products don't currently obtain the Trellix Agent information needed to investigate agent-related issues.
NOTE: For Linux and UNIX-based operating systems, we recommend that you use the MER tool. For details, see
KB83005 - How to use the MER tool for McAfee Agent for Linux and UNIX.
In situations where the MER tool for Trellix Agent for Linux or UNIX can't be used, capture the complete zipped contents of the locations specified below:
Trellix Agent 5.x
Folder |
Operating System |
/etc/ma.d/ |
Linux, Mac, Solaris, HP-UX, and AIX |
/var/McAfee/ |
Linux, Mac, Solaris, HP-UX, and AIX |
Other data to provide:
In addition to providing the MER files, you must provide the following data for certain types of issues:
- For issues related to a Trellix Agent crash or Segmentation Fault:
- Reproduce the issue and collect the core file.
- You must make sure that core file generation is enabled on the system. If you can't find the core dump file when the events occur, the core file generation is disabled on the system.
- For CPU-related issues, provide the output of the top command:
top -h | -v
NOTE: The top command gives you a list of available top command options.
- For issues related to memory, run the following command and provide the output.txt file:
sudo vmap -resident <PID or process name> >>output.txt
NOTE: If you run the command more than once, the >> operator appends the data to a file, whereas the > operator overwrites the file.
Importante: Per Assistenza tecnica sono necessari i seguenti file:
- Se si è utenti registrati, digitare l'ID utente e la password, quindi fare clic su accesso.
- Se non si è utenti registrati, fare clic su registra e completare i campi per inviare via email i password e le istruzioni.