[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 484
  • Last Modified:

linux server reboot

Hi

i noticed my server got rebooted last night at 11:45pm

when i checked

#last reboot

its shows my server rebooted last night


How do i find what caused this reboot?

Please advise.
0
linuxperson
Asked:
linuxperson
  • 6
  • 5
2 Solutions
 
gheistCommented:
Check log files (/var/log/messages ?) leading to reboot.
Please tell your Distribution and it's version (or at least "uname -r") so we dont run around guessing correct file paths.
0
 
linuxpersonAuthor Commented:
I ran the following

last reboot  and its shows the server got rebooted Tue Aug 19 21:19

Then i went to the /var/log/messages and checked what happened during Aug 19 21:19.
Not able to find much log to see what went wrong.
Any idea?
0
 
gheistCommented:
Can you introduce us to your environment?
What is your server? HP? Dell? IBM? Homebrew? (mostly to figure out if you have some sort of hardware fault recording)
Which Linux you are running? (Redhat? Ubuntu?) (mostly to check if you are checking right log files)

Reboot without trail may signify that your disk (or RAID BIOS) is bad, so please help us to understand your system to make up tailored instructions.
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 
penguins_ruleCommented:
perhaps root did a ctrl-alt-delete? There is a way to disable that, but is different for each OS and rev.
0
 
linuxpersonAuthor Commented:
I am using RHEL 6.5

Dell Server: R810
0
 
gheistCommented:
Connect to drac controller and check logs (i think you can get them with linux ipmitool too)
0
 
linuxpersonAuthor Commented:
I checked  /var/log/messages, dmesg

I don't see why any information as to see why the server got rebooted.
0
 
gheistCommented:
Install package mcelog and start mcelogd (service mcelogd start ; chkconfig mcelogd on) - it will record major hardware faults in syslog.

check all physical disks with smartctl -a /dev/sda ... sdb ...sdf ...
also make sure smartd is running same way mcelogd does.

enable psacct (install psacct and start same way as others) - now "lastcomm" will show all commands invoked at particular time even they dont want to be logged.

Do you get any microcode updated by kernel (in dmesg) ? Most likely you need firmware update for server then.

Could you connect DRAC to extract logs?
0
 
linuxpersonAuthor Commented:
Could you connect DRAC to extract logs?

please provide me bit more details of how to do this.

What logs from DRAC i need to extract?
0
 
gheistCommented:
DRAC is web interface on the IP you set in DRAC BIOS.
Well look around reboot time for hardware events....

Your server has management processor that records reboot events and their causes.
Dell™ OpenManage™ BMC, IPMI 2.0 compliant iDRAC6 Express,
0
 
linuxpersonAuthor Commented:
Thanks.

I did find out.  It was SAN issue,
Thanks everyone.
0
 
gheistCommented:
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 6
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now