How to find who rebooted the Linux server ??

Madeswaran N

How to find who rebooted the Linux server ??
The below steps will help to find out who or when the server had rebooted last time. Once the server had panic reboot or some one rebooted system admin need to find out why/ who and when the server had rebooted.
Hope the below will help to find out the things.
1. last command

 #last reboot

 or 

 #last |grep -i reboot

 2. who –b

 This command displays the time of last system boot and who logged on.
3.See these users shell history files in ~username/.bash_history for su or sudo commands.

 4.boot.log

 # cat /var/log/boot.log

 5.messages

 #more /var/log/messages 

   - and check the syslog started" time stamp

 6. grep reboot /home/*/.bash_history

   >> Now you can get which user rebooted the server.



Tags

Post a Comment

6 Comments

  1. AnonymousAugust 20, 2015 at 9:06 PM

    Good One..

    --Pathi

    ReplyDelete
  2. TaniyaSeptember 21, 2022 at 2:03 PM

    very amazing .

    ReplyDelete
  3. Cheap Dissertation WritingFebruary 4, 2023 at 1:01 PM

    I was also searching for this problem when i was using the linux but havn't found any possible solution but you content helps me a lot about my issue.

    ReplyDelete
  4. AnonymousFebruary 4, 2023 at 9:35 PM

    Our brand is one of the best online polo t shirts pakistan at a cheap rate.

    ReplyDelete
  5. Ellie JamesFebruary 14, 2023 at 12:26 PM

    I was looking for this problem since very long but currently busy commercial law dissertation topics after this I will again look into this matter.

    ReplyDelete
  6. B2B Lead Generation ServiceMay 24, 2023 at 2:41 AM

    To determine who rebooted the Linux server, you can check the system logs using the command "last reboot" or review the "/var/log/wtmp" file for the most recent login entries.

    ReplyDelete