How can I know why tha machine go down

[malki_3]

Hello everyone
This morning I have a hpux machine that goes down and I retsrat it
When I do who -r I have the date of my reboot but when I want to know at what's time I had the shutdwon, I don't found. I have checked in /etc/shutdownlog but I founf any information
Can you give help
Thinks

[U.SivaKumar_2]

hi,
cd /var/adm/syslog/
vi syslog.log
vi shutdown.log

regards,
U.SivaKumar

[BFA6]

Hi,

Have a look in /var/tombstones for the latest tombstone file. e.g ts99 look for Chasis codes.

Hilary

[John Strang]

I would check
/var/adm/syslog/OLDsyslog.log because when the machine reboots, the existing syslog.log file is renamed as OLDsyslog.log ana d new file created.

Use more OLDsyslog.log to show the contents of the file, one screen at a time.

HTH
John

[Tom Geudens]

Hi,
If the machine crashed ... you won't have a shutdowntime. Take a look at /var/adm/crash to see if a crashdump has been written.
Depending on the type of the machine you can also take a look at the serverlog which you'll find in the GSP, command SL.

Hope this helps,
Tom

[Mark Vollmers]

Hi-

what time does it shut down? Are you there when it happens? There have been a couple of threads about times when cleaning people or others have unknowingly unplugged servers during the night. Also, if you don't have a UPS on it, there might be a surge coming through at that time that is enough to bring it down. If possible, you might want to just sit there and watch it to make sure that it is not a hardware or external issue.

Mark

[pap]

Hi,
you can not check the rebooot time using who -r command.

you have to use who -b command to know when the machine has been booted.

Following is the entry from my one of the machine.

$ who -b
. system boot Apr 16 17:32
$

hope this helps,

-pap

[Bill Hassell]

/etc/shutdown will log the time of a powerfail (it logs this info after rebooting) but will not log a system crash unless you have setup crash dump capability. This means that you have:

1. Created /var/adm/crash
2. edited /etc/rc.config.d/savecrash and make sure that the line:

# SAVECRASH=0

is changed to:

SAVECRASH=1

If this is not done, no crashdump will be taken and the reason for the system crash cannot be logged. Note that the reason will not tell you what to fix, only that it crashed as opposed to a powerfail.

[Bill McNAMARA_1]

I would look at your swlist and syslog.

Run pdcinfo (under /usr/contrib) for info on hpmc..


Later,
Bill

[malki_3]

For the moment I can't for now with yours answers to verify at what time the machine have crashed..
I have used the pdcinfo and I dont know I can use it: I have this error: No valid timestamp
So I dont know if there's other solution to check at what's hour the machine have crashed and how can I verify why I had this problem
Thins all for your answers

[Steven Sim Kok Leong]

Hi,

Run q4 on the crash dump. q4 is a crashdump analysis tool.

Hope this helps. Regards.

Steven Sim Kok Leong