linux server reboot

Hi

i noticed my server got rebooted last night at 11:45pm

when i checked

#last reboot

its shows my server rebooted last night


How do i find what caused this reboot?

Please advise.
linuxpersonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

gheistCommented:
Check log files (/var/log/messages ?) leading to reboot.
Please tell your Distribution and it's version (or at least "uname -r") so we dont run around guessing correct file paths.
0
linuxpersonAuthor Commented:
I ran the following

last reboot  and its shows the server got rebooted Tue Aug 19 21:19

Then i went to the /var/log/messages and checked what happened during Aug 19 21:19.
Not able to find much log to see what went wrong.
Any idea?
0
gheistCommented:
Can you introduce us to your environment?
What is your server? HP? Dell? IBM? Homebrew? (mostly to figure out if you have some sort of hardware fault recording)
Which Linux you are running? (Redhat? Ubuntu?) (mostly to check if you are checking right log files)

Reboot without trail may signify that your disk (or RAID BIOS) is bad, so please help us to understand your system to make up tailored instructions.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

penguins_ruleCommented:
perhaps root did a ctrl-alt-delete? There is a way to disable that, but is different for each OS and rev.
0
linuxpersonAuthor Commented:
I am using RHEL 6.5

Dell Server: R810
0
gheistCommented:
Connect to drac controller and check logs (i think you can get them with linux ipmitool too)
0
linuxpersonAuthor Commented:
I checked  /var/log/messages, dmesg

I don't see why any information as to see why the server got rebooted.
0
gheistCommented:
Install package mcelog and start mcelogd (service mcelogd start ; chkconfig mcelogd on) - it will record major hardware faults in syslog.

check all physical disks with smartctl -a /dev/sda ... sdb ...sdf ...
also make sure smartd is running same way mcelogd does.

enable psacct (install psacct and start same way as others) - now "lastcomm" will show all commands invoked at particular time even they dont want to be logged.

Do you get any microcode updated by kernel (in dmesg) ? Most likely you need firmware update for server then.

Could you connect DRAC to extract logs?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
linuxpersonAuthor Commented:
Could you connect DRAC to extract logs?

please provide me bit more details of how to do this.

What logs from DRAC i need to extract?
0
gheistCommented:
DRAC is web interface on the IP you set in DRAC BIOS.
Well look around reboot time for hardware events....

Your server has management processor that records reboot events and their causes.
Dell™ OpenManage™ BMC, IPMI 2.0 compliant iDRAC6 Express,
0
linuxpersonAuthor Commented:
Thanks.

I did find out.  It was SAN issue,
Thanks everyone.
0
gheistCommented:
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Linux

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.