There are times wherein the entity process crashes, but the core dump file is not generated. Under this circumstance, it will be hard for Trend Micro Technical Support to do a check without core dump.
This article shows how to enable core dump for this particular case.
Below is a sample of the messages log you will see:
Jul 7 17:00:01 ws0432 splx_entity: [02180:02180] main: Grand child process abort, signal num(6) Jul 8 19:58:03 ws0432 splx_entity: [02225:02225] main: Grand child process abort, signal num(6) --cut-- Jul 10 02:02:18 ws0432 splx_entity: [02225:02225] main: Grand child process abort, signal num(6)
You will also see an entity dump file that was detected by the abrt command in the entity log. Below is a sample:
Jul 10 05:51:03 ws0432 abrt: Saved core dump of pid 28004 (/opt/TrendMicro/SProtectLinux/SPLX.vsapiapp/entity) to /var/spool/abrt/ccpp-2016-07-10-05:50:56-28004 (4240019456 bytes) Jul 10 05:51:03 ws0432 abrtd: Directory 'ccpp-2016-07-10-05:50:56-28004' creation detected
In such conditions, change the value of the "OpenGPGCheck" item in the /etc/abrt/abrt-action-save-package-data.conf file to "no" to generate the dump file.