Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Log that shows shutdown events

Posted on 2008-06-17
10
1,131 Views
Last Modified: 2008-06-20
Whenever I restart/shutdown Server 2003, the server prompts with a window asking me to enter the reason why the server is being restarted/shutdown.  Where is this information stored?  Event Viewer?
0
Comment
Question by:sedberg1
  • 4
  • 4
  • 2
10 Comments
 
LVL 6

Expert Comment

by:Jk387
ID: 21802745
Yes.  Event viewer.
0
 

Author Comment

by:sedberg1
ID: 21802768
Thank you.  Which log and which Event ID am I looking for.  Thanks or being vague
0
 

Author Comment

by:sedberg1
ID: 21802799
Sorry.  I didn't mean to sound obnoxious.  I just got yelled at for a power outage that wasn't my fault.  
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:sedberg1
ID: 21802834
We had a power outage sometime after 1:30am today and our Iseries went down.  The Dell servers had rebooted and this morning prompted me to enter a reason for the shutdwon.  I wrote power outage.  Will the log say the power outage happened when I entered the reason or when the actual power outage happened, which was hours before I came into work today.  How can I find out exactly when the outage occurred using this log?
0
 
LVL 6

Expert Comment

by:Jk387
ID: 21802861
Go to my computer... right click my computer... select manage... click event viewer and i believe it should be in your system log
0
 
LVL 6

Expert Comment

by:Jk387
ID: 21802889
To tell you the truth i am not exactly sure what it will log or when it will log it.  As far as i understand it is logged in what i believe to be the system log of event viewer but that really is as far as i know.
0
 
LVL 6

Expert Comment

by:Jk387
ID: 21802904
Normally it will come up as an error because windows was shut down unexpectedly.
0
 
LVL 58

Assisted Solution

by:tigermatt
tigermatt earned 500 total points
ID: 21803269
The event - and any text you happen to enter in the shutdown box - will be logged in the Event Viewer. It will be logged as a USER32 event at the time of the shutdown in the System log.

-tigermatt
0
 

Author Comment

by:sedberg1
ID: 21805370
The event showed up in System under USER32 but it showed up at the time when I logged in this morning and entered teh reason for the shutdown, not when the shutdown actually happened.
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 21806340
Sorry, let me rephrase that. The log will show up when you select the reason for the shutdown. In the event of a sudden power loss, the shutdown cannot be recorded because the server is given no warning of the shutdown - these sorts of power failures result in the unexpected shutdown comments which you have to enter at login.

For a graceful shutdown from Start > Shut Down, the comment and reason you enter will be recorded at shutdown.

For unexpected shutdowns, the only effective method to find the exact shutdown time is to look at the event log and see when the events stopped for a period of time. The security log would be a good log to check for that information.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question