topic Re: Log in Operating System - HP-UX

Log

Mohd Syafid Abdullah — Mon, 19 Sep 2005 20:35:54 GMT

Hi Guru,
Im using HP9000 L2K with DataProtector 5.1.
When im running backup, suddenly the power goes down.
How to track the time when the server is down.?
Im trying to read the syslog and OLDsyslog but the log doesnt mention it?
Please guru guide me

Re: Log

Joseph Loo — Mon, 19 Sep 2005 21:27:02 GMT

hi,

have u check:

# more /etc/shutdownlog
or
# tail /etc/shutdownlog

if not, check the timestamp of tombstones:

# ll /var/tombstones/ts99

regards.
(p.s. please remember to assign points.)

Re: Log

Adisuria Wangsadinata_1 — Mon, 19 Sep 2005 21:35:19 GMT

Hi,

You can check also from system log (SL) from GSP.

Cheers,
AW

Re: Log

Mohd Syafid Abdullah — Mon, 19 Sep 2005 21:39:46 GMT

hi,

in the /etc/shutdownlog, it state halt on 17:55 fri aug 19,2005.

in the /var/tombstones/ts99, the timestamp is sept 19 9:34.

so which one can i refer it?

Re: Log

Adisuria Wangsadinata_1 — Mon, 19 Sep 2005 22:24:44 GMT

Hi,

Looks like the system has been rebooted by itself at sept 19 9:34

You need to check the timestamp on ts99 file :

# more /var/tombstones/ts99

If the timestamp is recent,, please log a call to HP. Looks like the tombstones file in your system is valid, need HP to decode this.

Check also, whether there's a crash directory on /var/adm/crash has been generated.

Hope this information can help you.

Cheers,
AW

Re: Log

Joseph Loo — Mon, 19 Sep 2005 22:29:53 GMT

hi,

u should refer to /var/tombstones/ts99.

regards.

Re: Log

morganelan — Mon, 19 Sep 2005 23:48:23 GMT

Hi,
you must check the following files:
/var/adm/syslog/*
/var/adm/crash/....0/*
/var/opt/resmon/logs/event.log
/var/tombstones/ts99
/var/adm/syslog/OLDsyslog.log
Read your GSP error log messages.
And if you have contract to your local HP Support, send these above files to get detailed analyzing the root cause.

Re: Log

John Waller — Tue, 20 Sep 2005 01:59:02 GMT

I'm guessing you don't have a UPS protecting your server or if you do its not configured to shutdown the server before the battery runs out. In this case the server doesn't have chance to write to /etc/shutdownlog. You should be able to tell aproximatly when the power failed by running the command:
find /var/opt/omni/server/db40/logfiles -type f -exec ls -l {} \; | grep "Sep 19"
This will list all the files modified on that day. This is presuming you have not run another backup since and you believe the power went off yesterday.
The startup time you can find from either the time in /var/adm/syslog/syslog.log or who -b command.