Is there any message sent to a log file for improper system shutdown?
if yes then where should i be looking for it??
PLZ tell me


Regards

Most startup and shutdown messages (as well as runtime kernel messages) are logged in the file /var/log/messages

I thought it 1st but i m unable to find it there... any suggestion if i should be looking for any special expression?
currently i did

grep -R improper /var/log

grep -R shutdown /var/log

grep -R 'runlevel 0' /var/log

but i m unable to find any info abt power failure shutdown..

help

regardzzzzzz

Power failure messages may only be successfully logged if you have some form of UPS, as they will be logged only after the power has failed.

In the /etc/inittab file, there are some lines line this (this is how they appear on SuSE):
Looking at my /etc/init.d/powerfail script, I see these lines:
So I'd imaging that these are the strings to look for. They may vary completely on Red Hat.

You could also check if /var is mounted as a synchronous filesystem (sync option in /etc/fstab). If it's not then the message, if logged at all, is unlikely to make it out of the write-cache for the disk.

Another suggestion: try passing the -i option to grep for case-insensitive matches.

Thanks rjlee, i m having this problem on suse 9.1. I m trying to find a way to know when my ups after light was gone went off bcz the day it happend was sunday so no body was there to poweroff the system and it went straight away as somebody would have pulled the plug out :-( .... so no logs generated i guess ??? or is it the way "whenever light goes off nd pc switched over to ups they get a log entry of this switch over"
i dont think so... i can be wrong plz correct me if so..


regardzz