LOGS

[Indrajit Bhagat]

How to check Logs of Shutdown, Startup,Due to power failure of HP server 5405 , or common command to check the logs for administration purpose.

[freddy_21]

/etc/shutdownlog
/etc/rc.log ( startup process)
/var/adm/syslog/OLDsyslog.log

check from GSP, using serial port using showlog ( sl ) command


Thanks
freddy

[Sivakumar TS]

HI,

You may also check the /var/tombstones folder and find if there is any ts99 file, if the restart was due to any HPMC we will have the VALID file ( timestamp of the restart should match )

Regards,

Siva

[Rory R Hammond]

tombstones and the shutdown log ar good ideas.

But, I use /var/adm/syslog/OLDsyslog.

My syslog is very active and I do rotate them, However on HPUX at bootup /var/adm/syslog/syslog is moved to /var/adm/syslog/OLDsyslog.

On system crashes and power downs, the shutdown log will not have a time stamp entries. The last line in /var/adm/syslog/OLDsyslog usually has a time stamp that is very close to last time the system was really "working". Beside, I usually look at the OLD after startup for forensic information

Rory