Log

[Mohd Syafid Abdullah]

Hi Guru,
Im using HP9000 L2K with DataProtector 5.1.
When im running backup, suddenly the power goes down.
How to track the time when the server is down.?
Im trying to read the syslog and OLDsyslog but the log doesnt mention it?
Please guru guide me

[Joseph Loo]

hi,

have u check:

# more /etc/shutdownlog
or
# tail /etc/shutdownlog

if not, check the timestamp of tombstones:

# ll /var/tombstones/ts99

regards.
(p.s. please remember to assign points.)

[Adisuria Wangsadinata_1]

Hi,

You can check also from system log (SL) from GSP.

Cheers,
AW

[Mohd Syafid Abdullah]

hi,

in the /etc/shutdownlog, it state halt on 17:55 fri aug 19,2005.

in the /var/tombstones/ts99, the timestamp is sept 19 9:34.

so which one can i refer it?

[Adisuria Wangsadinata_1]

Hi,

Looks like the system has been rebooted by itself at sept 19 9:34

You need to check the timestamp on ts99 file :

# more /var/tombstones/ts99

If the timestamp is recent,, please log a call to HP. Looks like the tombstones file in your system is valid, need HP to decode this.

Check also, whether there's a crash directory on /var/adm/crash has been generated.

Hope this information can help you.

Cheers,
AW

[Joseph Loo]

hi,

u should refer to /var/tombstones/ts99.

regards.

[morganelan]

Hi,
you must check the following files:
/var/adm/syslog/*
/var/adm/crash/....0/*
/var/opt/resmon/logs/event.log
/var/tombstones/ts99
/var/adm/syslog/OLDsyslog.log
Read your GSP error log messages.
And if you have contract to your local HP Support, send these above files to get detailed analyzing the root cause.

[John Waller]

I'm guessing you don't have a UPS protecting your server or if you do its not configured to shutdown the server before the battery runs out. In this case the server doesn't have chance to write to /etc/shutdownlog. You should be able to tell aproximatly when the power failed by running the command:
find /var/opt/omni/server/db40/logfiles -type f -exec ls -l {} \; | grep "Sep 19"
This will list all the files modified on that day. This is presuming you have not run another backup since and you believe the power went off yesterday.
The startup time you can find from either the time in /var/adm/syslog/syslog.log or who -b command.