Identifying who or what rebooted a linux server SLES 11
I was hoping someone could help me with this question. I'm fairly new to Linux and have more experience with Windows systems. My question pertains SUSE SLES 11. I have server that was rebooted and we are trying to determine if someone rebooted it or if it was rebooted by a system process. The "last reboot" command shows me the time it was rebooted but not sure what caused the reboot.
reboot system boot 2.6.32.59-0.19-d Wed Nov 25 09:22 (7+01:22)
It doesn't appear have been rebooted by a logged in user, because I don't anything in the systems History where the reboot, shutdown or halt command was entered. I don't see anything /var/log/messages or /var/log/warn that would indicate the system rebooted. I'm just looking to identify the reason why this system rebooted at this time.
Thanks in advance for any help any can provide.
|