topic Re: system haltet in Operating System - HP-UX

system haltet

Peter Roege — Tue, 01 Feb 2005 11:20:58 GMT

hi

can any one please tell me where to find any logfiles if the system is being bought down if its haltet

Peter Røge SIEMENS Denmar

Re: system haltet

Pete Randall — Tue, 01 Feb 2005 11:31:17 GMT

/var/adm/syslog/syslog.log
/var/adm/shutdown.log
/etc/shutdownlog

Pete

Re: system haltet

Chris Vail — Tue, 01 Feb 2005 11:34:50 GMT

If the system has been stopped, it can't write any files. However, you can look at your syslog (generally /var/adm/syslog/syslog.log) to see when shutdown started. After its rebooted, the uptime command will tell you how long its been up.

Chris

Re: system haltet

Robert-Jan Goossens_1 — Tue, 01 Feb 2005 11:40:23 GMT

Hi Peter,

If your system is halted to init 0 you can only login to the GSP and access the GSP "error" log using the GSP "SL" command.

Regards,
Robert-Jan

Re: system haltet

A. Clay Stephenson — Tue, 01 Feb 2005 11:44:01 GMT

/etc/shutdownlog

If OS crashed, look in /var/adm/crash

/var/adm/syslog/syslog.log

Re: system haltet

Peter Roege — Tue, 01 Feb 2005 11:52:36 GMT

hi

the message from root is the following:

system maintenace about to begin
all processes will be terminatet in 0 sec

broatcast message from root
SYSTEM BEING BOUGHT DOWN NOW !!!!

hope this help
regard peter

Re: system haltet

melvyn burnard — Tue, 01 Feb 2005 12:04:06 GMT

are you saying that this is what was seen and then the system went down?

If so, this is because someone wit the right permissions has issued the shutdown command
check /etc/shutdownlog you should see it in there.

Re: system haltet

Peter Roege — Tue, 01 Feb 2005 12:19:36 GMT

Yes is see this message on screen !!!

To your help i am running a INGRES server on the system

I will try looking at logfiles

Regards Peter

Re: system haltet

Peter Roege — Tue, 01 Feb 2005 12:45:59 GMT

Hi

The ony message in shutdownlog is:
HALT

Peter

Re: system haltet

melvyn burnard — Tue, 01 Feb 2005 15:19:00 GMT

why don't you post the last few lines of your shutdown log, and the OLDsyslog.log, as this may give a clue

Re: system haltet

Rajiv Singhal — Tue, 01 Feb 2005 16:05:43 GMT

your /etc/shutdownlog should say something like this ,

11:14 Mon Sep 20, 2004. Reboot: (by wc-w5!root)
11:55 Mon Sep 20, 2004. Reboot:
12:05 Mon Sep 20, 2004. Reboot:
13:03 Mon Sep 20, 2004. Reboot:
10:19 Tue Sep 21, 2004. Reboot:
11:34 Tue Oct 12, 2004. Halt:
13:13 Fri Nov 19, 2004. Halt:
14:43 Fri Nov 19, 2004. Halt: (by wc-w5!root)
15:26 Fri Jan 21, 2005. Reboot:

Re: system haltet

Albert Smith_1 — Tue, 01 Feb 2005 21:38:22 GMT

Check your /etc/shutdownlog
check you /var/adm/syslog/syslog.log
check your /var/adm/syslog/OLDsyslog.log

If the system came down because of a panic it will be noted in the /etc/shutdownlog and there will be a recent ts99 file in:
/var/tombstones

and in most case's a crash file will be written out to:

/var/adm/crash

You can also do an: uptime or who to see how long the server has been up.

If the server didn't go down it is quite possible root could have walled it or someone was playing a prank to your terminal.
or the shutdown was aborted.

Re: system haltet

B. Hulst — Thu, 03 Feb 2005 10:33:11 GMT

Hi,

Just type the unix command last.

It will show you who logged in and when it rebooted cq. booted.

You might also have an idea who did it since
the host of the logged in user is also listed.

There is also lastb, for failed logins but not failed reboots. ;-)

- Bob

Re: system haltet

Peter Roege — Mon, 14 Mar 2005 09:05:32 GMT

Working on the problem now
Thanks to all for parcipitation

Regards Peter