Drgn is a tool and a programming library that can be used to extract debug information from both the live kernel of the running machine and memory crash dumps from halted systems (vmcore).

Drgn can be used as part of a root cause analysis to provide extra metrics that aren't already exposed through existing dashboards and interfaces.

For more information, see https://drgn.readthedocs.io/.

Corelens is provided through a separate drgn-tools package and provides the same functionality as Drgn, but requires no prior knowledge of the kernel implementation, data structures, or Python programming.

For more information, see the corelens(1) manual pages.