Hi,

Suppose linux server got restarted/shutdown unexpectedly, so how do i get what is exact problem and where i need to check, i mean which logs, common hardware or software related issues, is there any commands to check ?, please help me ..

You just have to look at the logs; it depends on what the problem was.
Start with /var/log/messages and maybe /var/log/dmesg and/or boot.log.

Thank you Chris,

one of our server got restarted and i got this logs from /var/log/messages

Mar 3 16:17:59 siu1 smartd[3722]: smartd received signal 15: Terminated
Mar 3 16:17:59 siu1 smartd[3722]: smartd is exiting (exit status 0)

do u know what is the issue..

You might want to look a bit deeper; smartd is a disk monitor http://linux.die.net/man/8/smartd. Stopping it should not reboot the OS.

this is the logs which i got in that server

Mar 3 16:16:53 siu1 dhclient: DHCPREQUEST on usb0 to 169.254.95.118 port 67
Mar 3 16:16:53 siu1 dhclient: DHCPACK from 169.254.95.118
Mar 3 16:16:53 siu1 dhclient: bound to 169.254.95.120 -- renewal in 279 seconds.
Mar 3 16:17:54 siu1 shutdown[27781]: shutting down for system halt
Mar 3 16:17:58 siu1 pcscd: winscard.c:304:SCardConnect() Reader E-Gate 0 0 Not Found
Mar 3 16:17:59 siu1 smartd[3722]: smartd received signal 15: Terminated
Mar 3 16:17:59 siu1 smartd[3722]: smartd is exiting (exit status 0)
Mar 3 16:18:00 siu1 avahi-daemon[3660]: Got SIGTERM, quitting.
Mar 3 16:18:00 siu1 avahi-daemon[3660]: Leaving mDNS multicast group on interface usb0.IPv6 with address fe80::e41f:13ff:fe49:e4ef.
Mar 3 16:18:00 siu1 avahi-daemon[3660]: Leaving mDNS multicast group on interface usb0.IPv4 with address 169.254.95.120.
Mar 3 16:18:00 siu1 avahi-daemon[3660]: Leaving mDNS multicast group on interface eth0.IPv6 with address fe80::e61f:13ff:fe45:488.
Mar 3 16:18:00 siu1 avahi-daemon[3660]: Leaving mDNS multicast group on interface eth0.IPv4 with address 10.177.114.3.
Mar 3 16:18:03 siu1 xinetd[3536]: Exiting...
Mar 3 16:18:07 siu1 nm-system-settings: disconnected from the system bus, exiting.
Mar 3 16:18:07 siu1 hcid[3285]: Got disconnected from the system message bus
Mar 3 16:18:07 siu1 kernel: nm-system-setti[4045]: segfault at 0000000000000000 rip 0000000000000000 rsp 00007fffd4ab4798 error 14
Mar 3 16:18:07 siu1 rpc.statd[3231]: Caught signal 15, un-registering and exiting.
Mar 3 16:18:08 siu1 auditd[3130]: The audit daemon is exiting.
Mar 3 16:18:08 siu1 kernel: audit(1362307688.109:2005236): audit_pid=0 old=3130 by auid=4294967295
Mar 3 16:18:08 siu1 pcscd: pcscdaemon.c:572:signal_trap() Preparing for suicide
Mar 3 16:18:08 siu1 pcscd: hotplug_libusb.c:376:HPRescanUsbBus() Hotplug stopped
Mar 3 16:18:09 siu1 pcscd: readerfactory.c:1379:RFCleanupReaders() entering cleaning function
Mar 3 16:18:09 siu1 pcscd: pcscdaemon.c:532:at_exit() cleaning /var/run
Mar 3 16:18:09 siu1 kernel: Kernel logging (proc) stopped.
Mar 3 16:18:09 siu1 kernel: Kernel log daemon terminating.
Mar 3 16:18:10 siu1 exiting on signal 15
Mar 3 22:03:09 siu1 syslogd 1.4.1: restart.
Mar 3 22:03:09 siu1 kernel: klogd 1.4.1, log source = /proc/kmsg started.
Mar 3 22:03:09 siu1 kernel: Linux version 2.6.18-164.el5 (mockbuild@x86-003.build.bos.redhat.com) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-46)) #1 SMP Tue
Aug 18 15:51:48 EDT 2009
Mar 3 22:03:09 siu1 kernel: Command line: ro root=LABEL=/1 rhgb quiet
Mar 3 22:03:09 siu1 kernel: BIOS-provided physical RAM map:
Mar 3 22:03:09 siu1 kernel: BIOS-e820: 0000000000010000 - 000000000009c400 (usable)
Mar 3 22:03:09 siu1 kernel: BIOS-e820: 000000000009c400 - 00000000000a0000 (reserved)
Mar 3 22:03:09 siu1 kernel: BIOS-e820: 00000000000e0000 - 0000000000100000 (reserved)
Mar 3 22:03:09 siu1 kernel: BIOS-e820: 0000000000100000 - 000000007aee7000 (usable)
Mar 3 22:03:09 siu1 kernel: BIOS-e820: 000000007aee7000 - 000000007cfbb000 (reserved)
Mar 3 22:03:09 siu1 kernel: BIOS-e820: 000000007cfbb000 - 000000007d861000 (usable)

Cross-posting is against the LQ rules. Please post your thread in only one forum. Posting a single thread in the most relevant forum will make it easier for members to help you and will keep the discussion in one place.

Continue in the other/original thread: https://www.linuxquestions.org/quest...ed-4175452600/

Reported for closure.