Server Reboots Same day but 20 minutes later each time?
I have a Windows 2008 Server that is exhibiting some weird behavior. Every Wednesday it will just shut its self off. I have replaced ram and power supply in the server. There initially appears to be no indicators in log why this would be happening. Any ideas and or suggestions or if more info needed please help.
This server runs Peachtree database but nothing extremely heavy duty. It has 32 gb ram and a 750 Watt Power Supply
Any thoughts
This server runs Peachtree database but nothing extremely heavy duty. It has 32 gb ram and a 750 Watt Power Supply
Any thoughts
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Need event logs for Peroid just before it shuts down.
ASKER
Which logs any certain one or all?
System and application
ASKER
the logs indicate a power failure..
ASKER
That's what I enter when we turn it back ok and are asked what the reason is.
need the log prior to the power failure event
ASKER
That was the entire logs that you asked for may need to wait until it does it again if it didnt include enough.
ASKER
Try changing the extensions on these the the evtx and then view see if that includes more. Thanks
Try these again. Thanks
1242013app.txt
1242013syst.txt
Try these again. Thanks
1242013app.txt
1242013syst.txt
I can see on your logs a big period to reboot or turning on the system... about 40mins which I don't understand if this is real time or not as your Time Server is not setup properly.
More, I can see in the logs that you have a DHCP error (ID 1020) which means you are running low on IP or you don't have more available... this should be check.
Also, there is someone... maybe yourself... using "LogMeIn" this should be stop at least until you figure your issue; DHCP Server Marsh_2.local can't be found is also logged.
Someone is connecting to your machine from IP:24.56.69.234 (hope is you).
Once everything is fix, you should be able to narrow down the issue. If all these are "normal" then try to remove your "normal" and make it standard... also turn off your antivirus update...
More, I can see in the logs that you have a DHCP error (ID 1020) which means you are running low on IP or you don't have more available... this should be check.
Also, there is someone... maybe yourself... using "LogMeIn" this should be stop at least until you figure your issue; DHCP Server Marsh_2.local can't be found is also logged.
Someone is connecting to your machine from IP:24.56.69.234 (hope is you).
Once everything is fix, you should be able to narrow down the issue. If all these are "normal" then try to remove your "normal" and make it standard... also turn off your antivirus update...
ASKER
Ok will check. The 40 minute was a period when no one could get to it to turn it back on soon enough. Will check the DHCP and yes i am that ip. Will keep you posted.
Ok so you are getting to the server remotely!!! therefore you don't know really if there was a power failure.
Are you George? or this a name of a machine.... if not try to find out who this is and what he is doing on the server.
Are you George? or this a name of a machine.... if not try to find out who this is and what he is doing on the server.
ASKER
Yes i do know. The customer is in the same office and has no power failure at all. George is the name of the server. So therefore i do know it is not a power failure.
Need to know if there is any update, backup, etc. schedule to run on a Wednesday as you mentioned this only goes on that day...
ASKER
Ended up after having someone sit in front of units and visually seeing it go down it was the UPS that was defective. Thanks for your help.
ASKER