{"Entry":{"collection":"guc","key":"send_abort_for_crash","name":"send_abort_for_crash","aliases":[],"metadata":{"baseline":false,"boot_human":"Not specified","boot_val":null,"category":"Developer Options","category_zh":"","changed_in":[],"changes":[{"documentation_changed":false,"fields":{},"from":"15","status":"added","to":"16"}],"content_hash":"deb3495f33e6fb2acfd03d5bef7c0d9b1716a17b36fbed591a101ba464176fc0","context":"","default_changed_in":[],"default_history":[{"from":"16","to":"19","value":"off"}],"derived_content_hash":"9fe7281f8fcccb5be84f3b908645c3554af98a2444b07dec11a0708013332700","documentation_refresh":{"batch":"20261113","original_source_rev":"wiki-repair-20261023:bc70e449cbd5fff42ebdb24f5c0e30f380176797dca023a9b87054903c3a757a","versions":{"16":"16.16","17":"17.12","18":"18.7","19":"19rc2"}},"editorial":{"advice":{"olap":"Long analytical runs can amplify send_abort_for_crash's debug overhead and artifacts. Prefer standard EXPLAIN and statistics first, and isolate any developer experiment from normal users.","oltp":"Do not tune production OLTP with send_abort_for_crash. Enable it only for a bounded reproduction with an owner, log/disk budget, rollback condition, and evidence-capture plan; restore the default immediately afterward.","small":"Keep send_abort_for_crash at its upstream default. A small host has less spare CPU, disk, connection, and log capacity for developer instrumentation."},"mechanism":["After one backend crashes, the postmaster normally asks remaining children to stop with SIGQUIT. send_abort_for_crash substitutes SIGABRT so those peer processes normally produce core dumps.","The dumps capture peer state around the incident, not just the original crashing process. Repeated crashes can therefore create many large core files.","PostgreSQL provides no automatic core-file cleanup. OS core limits, storage capacity, privacy, and a collection workflow must be configured before enabling it. Its SIGHUP context allows configuration reload without a server restart."],"pitfalls":["Leaving send_abort_for_crash enabled after the bounded diagnostic or recovery task.","Running the experiment on the only copy of production data.","Underestimating log, core-file, temporary-file, WAL, CPU, or connection-slot amplification.","Treating a server that merely starts or completes a query as proof that data and behavior are correct."],"references":[{"title":"PostgreSQL 19 Beta 4: send_abort_for_crash","url":"https://www.postgresql.org/docs/19/runtime-config-developer.html#GUC-SEND-ABORT-FOR-CRASH"},{"title":"PostgreSQL 19 release notes","url":"https://www.postgresql.org/docs/19/release-19.html"}],"related":["send_abort_for_kill","remove_temp_files_after_crash","log_error_verbosity","data_directory"],"summary":"send_abort_for_crash — Send SIGABRT not SIGQUIT to child processes after backend crash. Observed in PG16–19 Beta 4; its last measured boot default is off in PG19 Beta 4, with sighup context. This is a beta-snapshot fact and can change before PostgreSQL 19 GA."},"enumvals":[],"first_version":"16","group":"Developer Options","group_slug":"developer","imported_at":"2026-09-27T17:57:31.93493+08:00","intro_commit":{"authored_at":"2022-11-21T11:59:29-05:00","discussion":["https://postgr.es/m/2251016.1668797294@sss.pgh.pa.us"],"hash":"51b5834cd53f0bd068729043b55f7da3ca6bb15f","subject":"Provide options for postmaster to kill child processes with SIGABRT.","url":"https://git.postgresql.org/gitweb/?p=postgresql.git;a=commit;h=51b5834cd53f0bd068729043b55f7da3ca6bb15f"},"key":"send_abort_for_crash","last_version":"20","max_val":"","min_val":"","name":"send_abort_for_crash","position":348,"present_in":["16","17","18","19","20"],"repair_provenance":{"original_source_revision":"english-manuals:136c9e1fcf53ccce0367f3bd69062195d1e70dcd9a9e7a98a83123adfaf183e5","receipt_sha256":"3f61b18e54f2b17eee21e369e5f5750968b3172d6be16843a1773cd64c2abb75","repair":"wiki-repair-20261023"},"short_desc":"By default, after a backend crash the postmaster will stop remaining child processes by sending them SIGQUIT signals, which permits them to exit more-or-less gracefully.","short_desc_zh":"","source_rev":"wiki-repair-20261023:bc70e449cbd5fff42ebdb24f5c0e30f380176797dca023a9b87054903c3a757a","unit":"","vartype":"bool"}},"Definition":{"Collection":"guc","Key":"send_abort_for_crash","SourceDatabase":"center","Version":"18","SourceTable":"guc","SourceKey":"send_abort_for_crash","SourceRevision":"wiki-repair-20261023:bc70e449cbd5fff42ebdb24f5c0e30f380176797dca023a9b87054903c3a757a","Facts":{"boot_val":"off","category":"Developer Options","context":"sighup","description":"By default, after a backend crash the postmaster will stop remaining child processes by sending them SIGQUIT signals, which permits them to exit more-or-less gracefully. When this option is set to on, SIGABRT is sent instead. That normally results in production of a core dump file for each such child process. This can be handy for investigating the states of other processes after a crash. It can also consume lots of disk space in the event of repeated crashes, so do not enable this on systems you are not monitoring carefully. Beware that no support exists for cleaning up the core file(s) automatically. This parameter can only be set in the postgresql.conf file or on the server command line.","description_zh":"默认情况下，后端崩溃后，主进程会向其余子进程发送 SIGQUIT 信号使其停止，这样它们可以较为平稳地退出。当该选项设置为 on 时，则改为发送 SIGABRT。这通常会让每个这类子进程生成一个 core dump 文件。这有助于在崩溃后调查其他进程的状态。但在反复崩溃时，它也可能消耗大量磁盘空间，因此不要在未严密监控的系统上启用它。请注意，系统并不支持自动清理这些 core 文件。这个参数只能在 postgresql.conf 文件中或服务器命令行中设置。","description_zh_html":"\u003cp\u003e\n        默认情况下，后端崩溃后，主进程会向其余子进程发送 \u003cspan class=\"systemitem\"\u003eSIGQUIT\u003c/span\u003e 信号使其停止，这样它们可以较为平稳地退出。当该选项设置为 \u003ccode class=\"literal\"\u003eon\u003c/code\u003e 时，则改为发送 \u003cspan class=\"systemitem\"\u003eSIGABRT\u003c/span\u003e。这通常会让每个这类子进程生成一个 core dump 文件。这有助于在崩溃后调查其他进程的状态。但在反复崩溃时，它也可能消耗大量磁盘空间，因此不要在未严密监控的系统上启用它。请注意，系统并不支持自动清理这些 core 文件。这个参数只能在 \u003ccode class=\"filename\"\u003epostgresql.conf\u003c/code\u003e 文件中或服务器命令行中设置。\n       \u003c/p\u003e","doc":{"anchor":"GUC-SEND-ABORT-FOR-CRASH","file":"runtime-config-developer.html","lang":"en","sha256":"a3f6a107ed6ba4edaf6df03e52f4a469bd09350d545e4ff419e62844025ec1cf","slug":"18"},"doc_html":"\u003cp\u003e\n        By default, after a backend crash the postmaster will stop remaining\n        child processes by sending them \u003cspan class=\"systemitem\"\u003eSIGQUIT\u003c/span\u003e\n        signals, which permits them to exit more-or-less gracefully.  When\n        this option is set to \u003ccode class=\"literal\"\u003eon\u003c/code\u003e,\n        \u003cspan class=\"systemitem\"\u003eSIGABRT\u003c/span\u003e is sent instead.  That normally\n        results in production of a core dump file for each such child\n        process.\n        This can be handy for investigating the states of other processes\n        after a crash.  It can also consume lots of disk space in the event\n        of repeated crashes, so do not enable this on systems you are not\n        monitoring carefully.\n        Beware that no support exists for cleaning up the core file(s)\n        automatically.\n        This parameter can only be set in\n        the \u003ccode class=\"filename\"\u003epostgresql.conf\u003c/code\u003e file or on the server\n        command line.\n       \u003c/p\u003e","doc_same_as":"","documentation_revision":{"inputs":[{"file":"runtime-config-developer.html","kind":"same-version-reviewed-manual","locale":"en","sha256":"a3f6a107ed6ba4edaf6df03e52f4a469bd09350d545e4ff419e62844025ec1cf","version":"18.7"},{"file":"runtime-config-developer.html","kind":"same-version-reviewed-manual","locale":"zh-Hans","sha256":"e7e22aa5738a1d376b84af1adca796c5e14746266733f925eb50c3ef86a50655","version":"18.7"}],"release":"18.7","runtime_remeasured":false,"source_revision":"pgdoc:b9f0e7232f60f380d642ac9b99226606c254b552"},"documented":true,"enumvals":null,"extra_desc":null,"lang":"en","max_val":null,"metadata_version":"18","min_val":null,"name":"send_abort_for_crash","short_desc":"Send SIGABRT not SIGQUIT to child processes after backend crash.","source":"pg-settings-source-snapshot","translation_provenance":{"inputs":[{"kind":"current-pgdoc-translation","path":"/Users/vonng/pgsty/pgdoc/zh/18/html/runtime-config-developer.html","sha256":"3c08bf624188bbb0733dc7854e61c0c251c2578311ac3dc8fa626ab21b7911d1"}],"kind":"same-version-pgdoc","locale":"zh-Hans","source_revision":"b1b500221dbe5437cfca004d6b04d3f6e422765d","version":"18"},"unit":null,"vartype":"bool","zh_from":"same-version-manual"},"ManualEvidence":{"doc":{"anchor":"GUC-SEND-ABORT-FOR-CRASH","file":"runtime-config-developer.html","lang":"en","sha256":"a3f6a107ed6ba4edaf6df03e52f4a469bd09350d545e4ff419e62844025ec1cf","slug":"18"}},"MeasuredEvidence":{"metadata_version":"18"}},"Text":{"Collection":"guc","Key":"send_abort_for_crash","SourceDatabase":"center","Version":"18","Locale":"en","Title":"send_abort_for_crash","Summary":"By default, after a backend crash the postmaster will stop remaining child processes by sending them SIGQUIT signals, which permits them to exit more-or-less gracefully. When this option is set to on, SIGABRT is sent instead. That normally results in production of a core dump file for each such child process. This can be handy for investigating the states of other processes after a crash. It can also consume lots of disk space in the event of repeated crashes, so do not enable this on systems you are not monitoring carefully. Beware that no support exists for cleaning up the core file(s) automatically. This parameter can only be set in the postgresql.conf file or on the server command line.","BodyHTML":"\u003cp\u003e\n        By default, after a backend crash the postmaster will stop remaining\n        child processes by sending them \u003cspan\u003eSIGQUIT\u003c/span\u003e\n        signals, which permits them to exit more-or-less gracefully.  When\n        this option is set to \u003ccode\u003eon\u003c/code\u003e,\n        \u003cspan\u003eSIGABRT\u003c/span\u003e is sent instead.  That normally\n        results in production of a core dump file for each such child\n        process.\n        This can be handy for investigating the states of other processes\n        after a crash.  It can also consume lots of disk space in the event\n        of repeated crashes, so do not enable this on systems you are not\n        monitoring carefully.\n        Beware that no support exists for cleaning up the core file(s)\n        automatically.\n        This parameter can only be set in\n        the \u003ccode\u003epostgresql.conf\u003c/code\u003e file or on the server\n        command line.\n       \u003c/p\u003e","SourceRevision":"wiki-repair-20261023:bc70e449cbd5fff42ebdb24f5c0e30f380176797dca023a9b87054903c3a757a","ContentHash":"690fe1c9ca6696cd7628aea00ca1c8bedc6b21a24bf35f0ef25455866e1c07b9","Payload":{"description":"By default, after a backend crash the postmaster will stop remaining child processes by sending them SIGQUIT signals, which permits them to exit more-or-less gracefully. When this option is set to on, SIGABRT is sent instead. That normally results in production of a core dump file for each such child process. This can be handy for investigating the states of other processes after a crash. It can also consume lots of disk space in the event of repeated crashes, so do not enable this on systems you are not monitoring carefully. Beware that no support exists for cleaning up the core file(s) automatically. This parameter can only be set in the postgresql.conf file or on the server command line."}},"RequestedLocale":"en","Fallback":false,"Versions":["16","17","18","19","20"],"Locales":["en","zh-Hans"],"Signatures":null,"Spellings":null,"SQLState":null,"Evidence":null}