Domino on Linux/Unix, Troubleshooting, Best Practices, Tips and more ...

alt

Daniel Nashed

Domino on Linux Diagnostic Collection Script

Daniel Nashed – 2 January 2026 21:37:48

The Domino Diagnostic script is part of the Domino start script and included in the diagnostic menu.
This is already helpful. But I am working on something new to make it even more flexible.


I wanted to automat SFTP uploads to HCL support but it turns out to be difficult.
You would need to request a password for every ticket.


So here is my new idea coming from a customer support case.
The customer uses OwnCloud internally and to share data with their partners.

I looked into how to automate uploads and there is a simple way to use WebDav via Curl and a share password instead of a user/password. But both would work.

Besides WebDav I also added SFTP with a SSH key which works well with the standard scp client.

The script also got a simple to use interface to select the files you want to upload. By default the last 24 hours are used (which can be changed interactively).

This isn't in any of the projects yet and I am thinking where to add it. Probably this will be a separate script hooked into the diagnostic script.

Are there any other tools you are using to share files with other protocols which would make sense to implement beside:


  • OwnCloud (WebDav)
  • NextCloud (WebDav)
  • SCP

What do you think?


-- Daniel



Image:Domino on Linux Diagnostic Collection Script

Image:Domino on Linux Diagnostic Collection Script

Comments

1Christian Henseler  03.01.2026 10:49:39  Domino on Linux Diagnostic Collection Script

Good Morning & Happy new Year.

We are using a similar way to exchange data with partner.

But your approach needs a change on the Support-Side from HCL and why should they do this? Instead of waiting for the customer to deliver the requested data, with your way it's up to HCL to get the data. So, there is a change in the work flow and responsibility.

When I think of our support processes, we won't do that.

The problem with automatic diagnostic data upload to an endpoint outside of the EU is GDPR.

In log and NSD dumps are a lot of data that needs to be pseudomized or anonymized, it start with such simple things like user names, host names, IP adresses, etc...

As a result, before uploading any data to any partner, we are anonymizing the diagnostic data, in a way that it is still useful. So, we are not simple deleting "Christian Henseler" from the data, we are substituting it with "user a" and so on.

As far as I can see in our HCL support portal, there is a way to upload data to the support portal and it can be used with credentials the customer already had.

Is there no way to upload data this way?

Best Regards

Christian

2Remco Angioni  03.01.2026 16:56:51  Domino on Linux Diagnostic Collection Script

Like Christion, also our logs should first be scrubbed ( anonimized by replacing all user/network/server information to something else ) before sending it to HCL. We have several networks that are air-gapped and do not have any connection to the internet.

1. Great idea, but some customers ( mostly governments ) need their logs to be scrubbed, is this something you can add ( your own, or ours ?

After this....we have to send it to our security team in order to authorize the transfer ( they WILL check the logs for internal information ).

2. Can you, after performing #1, save the outcome somewhere so we can pick it up ( or mail it to support-admins ) and let us save it internally on our transfer portal ( secured transfer by encrypted USB Stick ) ?

3Daniel Nashed  04.01.2026 15:53:56  Domino on Linux Diagnostic Collection Script

@Christian,

Happy new year and all the best for 2026!

There is no automated update in the HCL support portal.

the SFTP way needs a password and the ticket number.

That's why I am providing multiple ways to collect the data from multiple servers to a central location at customer site.

This can be an intermediate step before sending it to HCL.

I gave up automatic uploading to HCL. The only feasable way is to use the HCL support portal via HTTPS.

In your case you need an intermediate step anyhow. Also the solution is for Linux only.

This isn't for HCL to get the data from customers. This is more to collect centralized and to share diagnostic data with partners -- and from that central location with HCL via the service portal.

Here is the official documentation:

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0010064

I wrote a tool to support SFTP with user/password. But I can't offer that, because this would bring additional work to HCL support and would likely cause support effort on my side when things go wrong.

4Daniel Nashed  04.01.2026 16:11:48  Domino on Linux Diagnostic Collection Script

@Remco,

this isn't end to end automation with HCL.

It is mainly to centrally, securely collect the data.

Scrubbing data etc is a separate step that you can add before sending it to HCL.

The key component here is the collection into a central place.

Domino already provides diagnostic collection, which can also help to collect the files to a central location.

But this is mainly in crash situations. This new diagnostic script is intended to simplify the collection in all cases. Not just crashes.

I am working on more options to ensure the transfer is safe. Like 7zipping the files with a password.

But yes your case and Christian's case needs a special step to share any data with external parties.

I know there had been efforts to remove GDPR relevant data etc. from logs. But I am not aware of any available tool.

It would be great to have jointed efforts as open source to benefit more customers.

You and Christian probably have both in-house solutions already.

5Hubertus  09.01.2026 7:59:12  Domino on Linux Diagnostic Collection Script

Hello Daniel,

Would HCL FileSilo also be an option as an internal “OwnCloud”?

Just a thought.

Kind regards

Hubertus

6Daniel Nashed  09.01.2026 18:13:21  Domino on Linux Diagnostic Collection Script

Hi Hubertus,

I see no documentation how to upload and authenticate automatically.

Interesting that it is called "HCL" this implies this is a HCL product.

But it is a business partner Domino based application.

It's not a commonly used tool and it seems to not have an API or standard interface.

Maybe it could be used with basic auth and a post. But without documentation, I can't implement it.

The idea is to use established, standard protocols.

-- Daniel

Links

    Archives


    • [HCL Domino]
    • [Domino on Linux]
    • [Nash!Com]
    • [Daniel Nashed]