Our Linux Server keeps getting the following message every few days. Where would I go to track down this issue?
Broadcast message from root (Mon Mar 1 20:13:57 2010):
The system is going down for system halt NOW!
Edit: /var/log/messages looks like this
Mar 1 18:10:05 CFMC2 sshd(pam_unix)[3326]: session closed for user alberte
Mar 1 20:13:57 CFMC2 shutdown: shutting down for system halt
Mar 1 20:13:57 CFMC2 init: Switching to runlevel: 0
Mar 1 20:13:57 CFMC2 gconfd (cfmc-5252): Received signal 15, shutting down cleanly
Mar 1 20:13:57 CFMC2 gconfd (cfmc-5252): Exiting
I also just foound this after running the command 'last'
reboot system boot 2.6.9-67.0.1.ELs Mon Mar 1 20:41 (15:35)
Thanks, Digital Ninja
The last time I saw this it turned out to be a bad motherboard sensor. The sensor was convinced the server was overheating and the OS would just shut down.
Check your BIOS or built-in management for hardware event logs that might describe what is happening.
Dude, someone has put
shutdown -h now
intocrontab
.Check
/var/log/cron
Is there a UPS attached to the machine? Are you sure it's not telling the machine to shut down because it thinks it's dying?
Couple things:
Who has access to this box? Check to see who logged on during those times and check the shell history files.
Have you checked out the log files for anything strange?
What do you have running on this box? Anything particular happening when this occurs?
Any time similarities to when this happens?