system reboot

[Sylvie Vezina]

Hi, I have 6 HP and one of them reboot during weekend and I don't know why and who did it. How can I know who performed that and how, on which log can I check?. As I know, nothing was scheduled and it's the first time that something like arrive. I have another Unix boxes and they were ok....
It's a L1000 model and run Unix 11.0
Thanks for your hints

[Con O'Kelly · Accepted solution]

Hi

You can check /etc/shutdownlog.
Often if a system panics it will write to this file.
Also check if you a crash dump in /var/adm/crash

Cheers
Con

[Michael Tully]

Check root's crontab
Check the end of /etc/shutdownlog, this may provide a users name, a reboot message or a panic

If it is a hardware problem, most likely by the /var/adm/crash or /etc/shutdownlog, check the GSP logs and then open a call with HP.

[Sylvie Vezina]

Yes your right, on shutdownlog I have:

Reboot after panic: Spinlock deadlock!

How can I prevent it?

[Con O'Kelly]

Hi

Its quite possibly a patch issue that caused your system to panic and re-boot.

Have a look at the reply from Bill Hassell in the attached thread which explains your spinlock panic and a possible solution.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=200674

Cheers
Con

[Patrick Wallek]

A spinlock deadlock is almost certainly a software patch problem.

You should have a crash dump in /var/adm/crash. Open a call to HP and have them analyze it. They will be able to tell you what caused it adn what patch or patches you need to fix it.

You can do some preliminary analysis with the Q4 utility. Instructions are here:

TKB DOC ID OZBEKBRC00000611
http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000074245952