I got a monitoring alert that says a Unix process just crashed but the alert did not
specify the pid or process name that just crashed.
Is there any way to find out?
What about the directory /usr/ucb/... : does it hold any clue
I recall in Linux /var/run there are *.pid files that hold the pid of processes.
If a process was abrupted terminated or manually "killed", does the pid file
stays behind? I thought of going thru one by one the .pid files to see the pid
& check which ones are no longer found in "ps -ef"
/var/log/messages did not give any clue
any good Shell script / command to check this easily would be most welcome