Print

EOS 4.37.0F User Manual - Collecting Logs for a Tech Support Bundle (Troubleshooting) Print

Collecting Logs for a Tech Support Bundle (Troubleshooting)

Create a ZIP file containing a useful set of logs and command outputs and write it to a specified local or remote destination. If sent to a remote location, EOS creates the ZIP file and streams it to the destination on the fly which saves local disk space.

The feature provides a convenient method of collecting logs for a support ticket without bash level access to the switch. The feature supports the following protocols for sending support bundles:
  • crash
  • flash
  • ftp
  • http
  • https
  • scp
  • sftp
  • tftp

Collected Log Files

The support bundle includes the following log files:
  • /mnt/drive/archive
  • /mnt/drive/schedule/tech-support
  • /mnt/flash/archive
  • /mnt/flash/debug
  • /mnt/flash/Fossil
  • /mnt/flash/schedule/tech-support
  • /proc/mounts
  • /var/core
  • /var/log/agents
  • /var/log/canary.log
  • /var/log/kernel.debug
  • /var/log/rbfd.log
  • /var/log/qt
  • /var/log/startup-config-output
  • /var/log/messages*
  • /var/log/account**

*Collect /var/log/messages* instead of /var/log/messages.

**Collect /var/log/account* instead of show aaa accounting log output.

Collected Command Outputs

The support bundle includes the following command outputs:
  • bash dmesg -T -x -S
  • bash lsblk
  • bash sudo ls -lahRS /var/log
  • show arp vrf all
  • show tech-support all
  • show tech-support extended evpn
  • show tech-support extended isis vrf all
  • show tech-support extended ospf vrf all
  • show tech-support extended ospfv3 vrf all
  • show tech-support extended rip vrf all
  • show tech-support extended l1
  • show agent qtrace

Using the Support Bundle Feature

The send support-bundle command does not require any prior setup before sending the ZIP file.

To send a support bundle to a local destination, use the following CLI command:

switch# send support-bundle flash:/
...
Support bundle support-bundle-Arista-2026_04_15-14_39_17.zip successfully sent to flash:/
switch#

To send a support bundle to a remote destination, use the following command:

switch# send support-bundle scp://user@host/path
...
user@host's password:
...
Support bundle support-bundle-Arista-2026_04_15-14_39_17.zip successfully sent to scp://user@host/path
switch#
Note: The specific host configuration may or may not require a password.

To send a support bundle to a peer supervisor, use the following command:

switch# send support-bundle supervisor-peer:/path
...
Support bundle support-bundle-Arista-2026_04_15-14_39_17.zip successfully sent to supervisor-peer:/path
switch#

Use the case-number option to add the TAC support case number to the support bundle:

switch# send support-bundle flash:/ case-number 123456
...
Support bundle support-bundle-SR123456-Arista-2026_04_15-14_39_17.zip successfully sent to flash:/
switch#

Since support bundles may be large files, excluding selected groups of files reduces the file size and may be useful if not needed for a support ticket.

The exclude parameter excludes the following optional groups and files:
  • archive - /mnt/drive/archive and /mnt/flash/archive
  • cores - /var/core
  • supervisor-peer - Exclude standby supervisor support bundle.
switch# send support-bundle exclude archive cores supervisor-peer flash:/
...
Support bundle support-bundle-Arista-2026_04_15-14_39_17.zip successfully sent to flash:/
switch#
The file structure within the ZIP file matches the logs collected. For instance, log files collected at /var/log/kernel.debug on the switch, can be found in the ZIP file at /var/log/kernel.debug. Locate command outputs in the directory tmp/support-bundle-cmds/ inside the ZIP file. And if collecting the standby supervisor support bundle, locate the ZIP file at the root of the active supervisor's ZIP archive.
Note: When sending a file to a remote destination, the destination device must have the cat UNIX utility installed.
Note: Although the command accepts different protocols for remote destinations, use SSH for streaming the support bundle. The remote host must have SSH installed in order to transfer the support bundle.
..