how to check The event viewer in Redhat Enterprise Linux 6.6 for a specific time
we have a redhat enterprise server version 6.6 , this server goes down(power off) at specific time. we want to review the events happened only at that day when server goes down .. like how we check in windows
what is the commands needed to check and how to specify the day needed
You have to search
ls -l /var/log/messages*
It will have the date the file was last updated, so you need to look within the file dated after the event you are looking for.
Last | more
Look to see whether there was a logged in session when the system powered off.
Is this a physical or virtual system?
If it is virtual, make sure the issue is not a result of host automatic backup that shuts down the VM before the backup, but forgets to turn the VM back on.
What is the interval that this happens?