?
Solved

Log that shows shutdown events

Posted on 2008-06-17
10
Medium Priority
?
1,135 Views
Last Modified: 2008-06-20
Whenever I restart/shutdown Server 2003, the server prompts with a window asking me to enter the reason why the server is being restarted/shutdown.  Where is this information stored?  Event Viewer?
0
Comment
Question by:sedberg1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
  • 2
10 Comments
 
LVL 6

Expert Comment

by:Jk387
ID: 21802745
Yes.  Event viewer.
0
 

Author Comment

by:sedberg1
ID: 21802768
Thank you.  Which log and which Event ID am I looking for.  Thanks or being vague
0
 

Author Comment

by:sedberg1
ID: 21802799
Sorry.  I didn't mean to sound obnoxious.  I just got yelled at for a power outage that wasn't my fault.  
0
Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

 

Author Comment

by:sedberg1
ID: 21802834
We had a power outage sometime after 1:30am today and our Iseries went down.  The Dell servers had rebooted and this morning prompted me to enter a reason for the shutdwon.  I wrote power outage.  Will the log say the power outage happened when I entered the reason or when the actual power outage happened, which was hours before I came into work today.  How can I find out exactly when the outage occurred using this log?
0
 
LVL 6

Expert Comment

by:Jk387
ID: 21802861
Go to my computer... right click my computer... select manage... click event viewer and i believe it should be in your system log
0
 
LVL 6

Expert Comment

by:Jk387
ID: 21802889
To tell you the truth i am not exactly sure what it will log or when it will log it.  As far as i understand it is logged in what i believe to be the system log of event viewer but that really is as far as i know.
0
 
LVL 6

Expert Comment

by:Jk387
ID: 21802904
Normally it will come up as an error because windows was shut down unexpectedly.
0
 
LVL 58

Assisted Solution

by:tigermatt
tigermatt earned 2000 total points
ID: 21803269
The event - and any text you happen to enter in the shutdown box - will be logged in the Event Viewer. It will be logged as a USER32 event at the time of the shutdown in the System log.

-tigermatt
0
 

Author Comment

by:sedberg1
ID: 21805370
The event showed up in System under USER32 but it showed up at the time when I logged in this morning and entered teh reason for the shutdown, not when the shutdown actually happened.
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 2000 total points
ID: 21806340
Sorry, let me rephrase that. The log will show up when you select the reason for the shutdown. In the event of a sudden power loss, the shutdown cannot be recorded because the server is given no warning of the shutdown - these sorts of power failures result in the unexpected shutdown comments which you have to enter at login.

For a graceful shutdown from Start > Shut Down, the comment and reason you enter will be recorded at shutdown.

For unexpected shutdowns, the only effective method to find the exact shutdown time is to look at the event log and see when the events stopped for a period of time. The security log would be a good log to check for that information.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question