Reboot

[Reshma Malusare]

Hi,

How to find out if anyone hard booted the HP-UX server. Since shutdownlog is not updated etc.

Regards

[Shrikant Lavhate]

If you firmly know about last known shutdown of sytem then #uptime may help you to find out if there is any reboot took place in between your last known time to till.

-=ShRi=-

[Robert-Jan Goossens]

Hi Reshma,

From the man last man page.

The pseudo-user reboot logs each time the system reboots. Thus, last reboot is a useful command for evaluating the relative time between system reboots.

Regards,
Robert-Jan

[whiteknight]

Reshma,

Check the /etc/rc.log for the timestamp of the system restart.

WK

[Reshma Malusare]

Hi,

The system got rebooted at 04:30 am and rc.log timestamp is 04:34 a.m.

ts99 file created also gives no errors. Cant find out how the system got rebooted.

Regards

[MarkSyder]

Have you tried:

tail /var/adm/syslog/OLDsyslog.log ?

It may just have stayed up long enough to record something along the lines of "Loss of power". I can't remember the exact wording, but I have seen it once.

Mark Syder (like the drink but spelt different)

[Reshma Malusare]

Hi,

No updates in OLDsyslog too.

Regards

[Sp4admin]

Take a look at the /var/adm/shutdowlog this may give a clue.

sp,

[Reshma Malusare]

Hi,

The system got rebooted yesterday and the shutdownlog timestamp is one month old.

Please let me know if anyone has hard booted the server where the entry is logged.

Regards

[Victor BERRIDGE]

Greetings,

And dont laugh...
I just happen to find a box in the same situation, I woulnd have noticed if it were not for open connections I had...

secuciv:/home/vbe $ uptime
1:38pm up 19:34, 12 users, load average: 0.11, 0.32, 0.34
[4] + Done xstm&
secuciv:/home/vbe $ ll /var/adm/syslog/Syslog.log.071122
-rw-r--r-- 1 root root 23164 Nov 22 16:00 /var/adm/syslog/Syslog.log.07112
2
secuciv:/home/vbe $ ll /etc/shutdownlog
-rw-r--r-- 1 bin bin 1180 Nov 14 19:11 /etc/shutdownlog
secuciv:/home/vbe $ ll /etc/*rc.l*
-rw-r--r-- 1 root root 44481 Nov 23 10:46 /etc/rc.log
-rw-r--r-- 1 root root 47762 Nov 22 18:04 /etc/rc.log.old
secuciv:/home/vbe $

In my opinion I checked all users and found only myself with a open vi at 18:00
This box is in a distant site in a office althought there is a UPS in that room I believe its more like a power disruption...

[F Verschuren]

if /etc/shutdownlog does not show who has rebooted the server it is propely chrached
there can be some reasons:
cluster is not getting anny proces time
power dip/peek
somebody hitting the switch.
etc.