Check the crash dump directory for a crash dump created after the switchover had occurred. The time the dump was written can be found by referring to the time stamp using, for example, "ls(1)" command.
If a crash dump after the switchover is found
Save the crash dump.
If a crash dump after the switchover is not found
If the failed node is restartable, manually collect a crash dump before restarting it.
Information
A crash dump is stored as a file on the node in which the error occurred.
When you are using the virtual machine function in the KVM environment and your guest OS has been forcefully stopped by the shutdown facility, the crash dump will be stored in the following directory for the hypervisor.
/var/crash/<shutdown time of the guest OS (YYYYMMDDHHMMSS)>.<Domain name for the guest OS>.core
Example: node1 was forcefully stopped at 12:34:56 on 20th April, 2011
/var/crash/20110420123456.node1.core
