One of my server got restarted and I am able to see the below entries about a minute before in /var/log/messages :


Jul 18 1:15:15 server_id kernel: [Hardware Error]: Machine check events logged
Jul 18 1:15:15 server_id rsyslogd-3177: imuxsock begins to drop messages from pid 19166 due to rate-limiting
Jul 18 1:15:28 server_id snmpd[3119]: Connection from UDP: [IP]:62019->[IP]
Jul 18 1:15:30 server_id rsyslogd-3177: imuxsock lost 51 messages from pid 19166 due to rate-limiting

Is it something really hardware issue ? I cant find any other log related with this restart. Please advise

From https://www.kernel.org/doc/Documenta...4/machinecheck : "Machine checks report internal hardware error conditions detected by the CPU. Uncorrected errors typically cause a machine check (often with panic), corrected ones cause a machine check log entry.

Machine checks are organized in banks (normally associated with a hardware subsystem) and subevents in a bank. The exact meaning of the banks and subevent is CPU specific.

mcelog knows how to decode them.

When you see the "Machine check errors logged" message in the system log then mcelog should run to collect and decode machine check entries from /dev/mcelog. Normally mcelog should be run regularly from a cronjob."

I suggest you start with that.

*Also I'll move your thread to the Linux General forum as I don't see any security aspects.