Collecting Logs for a Tech Support Bundle (Troubleshooting)

Create a ZIP file containing a useful set of logs and command outputs and write it to a specified local or remote destination. If sent to a remote location, eos creates the ZIP file and streams it to the destination on the fly which saves local disk space.

The feature provides a convenient method of collecting logs for a support ticket without bash level access to the switch. The feature supports the following protocols for sending support bundles:
  • crash
  • flash
  • ftp
  • http
  • https
  • scp
  • sftp
  • tftp

Collected Log Files

The support bundle includes the following log files:
  • /mnt/drive/archive
  • /mnt/drive/schedule/tech-support
  • /mnt/flash/archive
  • /mnt/flash/debug
  • /mnt/flash/Fossil
  • /mnt/flash/schedule/tech-support
  • /proc/mounts
  • /var/core
  • /var/log/agents
  • /var/log/canary.log
  • /var/log/kernel.debug
  • /var/log/rbfd.log
  • /var/log/qt
  • /var/log/startup-config-output
  • /var/log/messages*
  • /var/log/account**

*Collect /var/log/messages* instead of /var/log/messages.

**Collect /var/log/account* instead of show aaa accounting log output.

Collected Command Outputs

The support bundle includes the following command outputs:
  • bash dmesg -T -x -S
  • bash lsblk
  • bash sudo ls -lahRS /var/log
  • show arp vrf all
  • show tech-support all
  • show tech-support extended evpn
  • show tech-support extended isis vrf all
  • show tech-support extended ospf vrf all
  • show tech-support extended ospfv3 vrf all
  • show tech-support extended rip vrf all
  • show tech-support extended l1
  • show agent qtrace

Using the Support Bundle Feature

The send support-bundle command does not require any prior setup before sending the ZIP file.

To send a support bundle to a local destination, use the following CLI command:

switch# send support-bundle flash:/
...
Support bundle support-bundle-Arista-2026_04_15-14_39_17.zip successfully sent to flash:/
switch#

To send a support bundle to a remote destination, use the following command:

switch# send support-bundle scp://user@host/path
...
user@host's password:
...
Support bundle support-bundle-Arista-2026_04_15-14_39_17.zip successfully sent to scp://user@host/path
switch#
Note: The specific host configuration may or may not require a password.

To send a support bundle to a peer supervisor, use the following command:

switch# send support-bundle supervisor-peer:/path
...
Support bundle support-bundle-Arista-2026_04_15-14_39_17.zip successfully sent to supervisor-peer:/path
switch#

Use the case-number option to add the TAC support case number to the support bundle:

switch# send support-bundle flash:/ case-number 123456
...
Support bundle support-bundle-SR123456-Arista-2026_04_15-14_39_17.zip successfully sent to flash:/
switch#

Since support bundles may be large files, excluding selected groups of files reduces the file size and may be useful if not needed for a support ticket.

The exclude parameter excludes the following optional groups and files:
  • archive - /mnt/drive/archive and /mnt/flash/archive
  • cores - /var/core
  • supervisor-peer - Exclude standby supervisor support bundle.
switch# send support-bundle exclude archive cores supervisor-peer flash:/
...
Support bundle support-bundle-Arista-2026_04_15-14_39_17.zip successfully sent to flash:/
switch#
The file structure within the ZIP file matches the logs collected. For instance, log files collected at /var/log/kernel.debug on the switch, can be found in the ZIP file at /var/log/kernel.debug. Locate command outputs in the directory tmp/support-bundle-cmds/ inside the ZIP file. And if collecting the standby supervisor support bundle, locate the ZIP file at the root of the active supervisor's ZIP archive.
Note: When sending a file to a remote destination, the destination device must have the cat UNIX utility installed.
Note: Although the command accepts different protocols for remote destinations, use SSH for streaming the support bundle. The remote host must have SSH installed in order to transfer the support bundle.