Techniques involve in response to receiving, from a failure analysis device, a request for obtaining a to-be-analyzed data block in a set of raw data blocks in a data file related to a failure of an operating system, determining a position of the to-be-analyzed data block in a compressed file for the data file, the request comprising a position of the to-be-analyzed data block in the data file. The techniques further involve determining, based on the position of the to-be-analyzed data block in the compressed file, a compressed data block in the compressed file corresponding to the to-be-analyzed data block. The techniques further involve sending the compressed data block to the failure analysis device for analyzing the failure. Accordingly, the time for analyzing the failure may be saved, the amount of data transmission and the resources occupied by decompression may be reduced, and the processing efficiency may be improved.