Sponsored Content
Full Discussion: Checking Who rebooted a Host
Operating Systems Solaris Checking Who rebooted a Host Post 302414189 by incredible on Monday 19th of April 2010 11:49:11 AM
Old 04-19-2010
check the /var/log/sulog file, from there you will know who did su - as root before he/she did a reboot. You can somewhat get the timing from there if you're lucky. Also look at the messages, check if its a panic(any coredumps?? under /var/crash/hostname)..
dmesg can show you some clues too. Check your audits.. history files of user under their home directories eg .bash_history
check if there is any init or reboot commands in there
 

10 More Discussions You Might Find Interesting

1. IP Networking

QNX host cannot ping SCO host, vice versa

The problem I am facing now is that the QNX host could not ping the SCO host and vice versa. They are in the same domain, ie, 172.20.3.xx. As I am very new to Unix, I guess I must have missed out some important steps. Pls help... Thanx alot (2 Replies)
Discussion started by: gavon
2 Replies

2. UNIX for Dummies Questions & Answers

Sun Machine Rebooted

Hi , My Sun Machine Rebooted by itself 2 days back . Its running fine now , But i wanted to find out wat caused it to reboot... This is wat the var/adm/messages show . Kern.notice:- System booting after fatal error FATAL... Wat causes this message ... And wat tasks should i do to ensure it... (6 Replies)
Discussion started by: DPAI
6 Replies

3. Shell Programming and Scripting

how can I know when system last rebooted?

hi anyone one here for helping me? plzzzzzzzzzzzzz I would like to know how Licensing information such as the operating system revision level and license restrictions in terms of user numbers can be seen? and When was the system last rebooted can also be seen? (3 Replies)
Discussion started by: nokia1100
3 Replies

4. Solaris

server rebooted by user

Hi, how can i know who has rebooted the server? even last command is not displaying the user, wheather any way to track the user. (2 Replies)
Discussion started by: manoj.solaris
2 Replies

5. Solaris

rebooted alone

dear all Iam unix administrator and yesterday the server rebooted alone and when i check the messages i find the below errors can you help me (3 Replies)
Discussion started by: murad.jaber
3 Replies

6. AIX

server rebooted

Hi, I want to know how to find out which user has rebooted the server? I have used last command but it is not giving username though it is showing below output reboot --------------- date Regards, Manoj (5 Replies)
Discussion started by: manoj.solaris
5 Replies

7. UNIX for Advanced & Expert Users

Help! How to find the local host after few ssh hops to remote host???

I do a ssh to remote host(A1) from local host(L1). I then ssh to another remote(A2) from A1. When I do a who -m from A2, I see the "connected from" as "A1". => who -m userid pts/2 2010-03-27 08:47 (A1) I want to identify who is the local host who initiated the connection to... (3 Replies)
Discussion started by: gomes1333
3 Replies

8. Solaris

Checking the port status of a remote host

Hi there I am in the process of writing a script to check whether a port on a remote system is up or not. Here's what I have so far: #!/bin/bash telnet xx.xx.xx.xx 80 | (echo "^]") if ]; then echo "Please check Web services " | mailx -s "Please check webservices... (1 Reply)
Discussion started by: notreallyhere
1 Replies

9. Linux

Rebooted suddenly

Hi Team, server rebooted happen sunddely, i check all the log files but ..i didn't find any reason...kindly share your's ideas with me... Thanks in advace Rajesh_Apple...:b: (1 Reply)
Discussion started by: Rajesh_Apple
1 Replies

10. Red Hat

Server rebooted.

Hi, Yesterday one of Red Hat Server 4.2 got rebooted. I have checked /var/log/messages, but does not find out any serious issue related to peformance / hardware issue. how to find out why server was rebooted? (1 Reply)
Discussion started by: manoj.solaris
1 Replies
reboot(8)						      System Manager's Manual							 reboot(8)

NAME
reboot - Restarts the machine SYNOPSIS
/usr/sbin/reboot [-dlnq] DESCRIPTION
When the system is running and multiple users are logged in, use the shutdown -r command to perform a reboot operation. If no users are logged in, use the reboot command. The reboot command normally stops all running processes, syncs the disks, logs the reboot, and writes a shutdown entry in the login accounting file, /var/adm/wtmp. The reboot command uses the sync call to synchronize the disks, and to perform other shutdown activities such as resynchronizing the hard- ware time-of-day clock. After these activities, the system reboots. By default, the system starts and the file systems are automatically checked. If the start-up activities are successful, the system comes up in the default run-level. You must have root privileges to use this command. Using the -n flag can result in file system damage. FLAGS
Generates a crash dump of the system before halting it. Can be used with any of the other flags. Does not log the reboot using syslog Does not sync the disks or log the reboot using syslog Performs a quick reboot without first shutting down running processes; does not log the reboot using syslog EXAMPLES
To enable the default reboot action, enter: reboot This command causes the system to stop all running processes, sync the disks, log the shutdown, and perform other routine shutdown and reboot activities. To shut down the system without logging the reboot, enter: reboot -l This command shuts down the system and performs all shutdown and reboot activities, except logging the shutdown. To reboot the system abruptly, enter: reboot -q This command reboots the system abruptly without shutting down running processes. FILES
Specifies the command path Specifies the login accounting file Specifies the path of the syslog daemon RELATED INFORMATION
Commands: fsck(8), halt(8), init(8), savecore(8) shutdown(8), syslogd(8) Functions: reboot(2), sync(2), syslog(3) delim off reboot(8)
All times are GMT -4. The time now is 10:10 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy