Process Dump Results details provide the status of the process dump. This page also provides endpoint data recorder information about all of the events for a process with the backing SHA2 hash (not limited to process events) for the duration of the recording.
Click any of the following links to learn more about that section of the Process Dump Results page:
The summary provides the following information about the process dump:
The user who initiated the process dump.
The date and time (in UTC), in which the process dump was initiated.
The unique identifier for the process dump.
The Cancel action cancels the dump operation. This action only appears if the process dump is still in progress.
Only users with the Admin role or Controller role can perform actions. Actions that are not permitted based on your role appear in ATP Manager as inactive. You can view the status of your actions on the Search > Endpoint tab.
ATP cancels any inactive dump commands that do not return new results 3 days after they are initiated.
The results of the process dump appear in the Events Summary view. Click the following link to learn more about using the Events Summary view.