Glossary: Logs and Data Sources for Investigations
qemu-img
A tool that creates (-c) and lists (-l) snapshots of a QEMU disk, and should only touch a disk that is not in use. For a running VM, you take the snapshot through the hypervisor instead, for example with virsh snapshot-create.