<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
 /* Font Definitions */
 @font-face
        {font-family:Helvetica;
        panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:"MS Shell Dlg 2";
        panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p
        {mso-style-priority:99;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
span.apple-style-span
        {mso-style-name:apple-style-span;}
span.EmailStyle20
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
        {page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext="edit">
  <o:idmap v:ext="edit" data="1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=EN-US link=blue vlink=purple style='word-wrap: break-word;
-webkit-nbsp-mode: space;-webkit-line-break: after-white-space'>

<div class=Section1>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>The ClientAddress:10.45.100.35 is the server itself.&nbsp; How
can a server SSH to itself and type utils system restart? &nbsp;I must be mis-reading
this!<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>admin:file search activelog audit/AuditApp/* &quot;utils system
restart&quot;<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Searching path: /var/log/active/audit/AuditApp/*<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>/var/log/active/audit/AuditApp/Audit00000120.log:04/19/2010
17:52:55.159 |LogMessage&nbsp;&nbsp; UserID :administrator&nbsp; ClientAddress
:10.45.100.35&nbsp; Severity :3&nbsp; EventType :CLICommand&nbsp;
ResourceAccessed:GenericCLI&nbsp; EventStatus :Success&nbsp; AuditDetails :CLI
Command-&gt; utils system restart&nbsp; ComponentID :CLI App ID:Command Line
Cluster ID: Node ID:USUNITY2|<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>/var/log/active/audit/AuditApp/Audit00000021.log:05/24/2010
09:40:50.279 |LogMessage&nbsp;&nbsp; UserID :administrator&nbsp; ClientAddress
:10.45.100.35&nbsp; Severity :3&nbsp; EventType :CLICommand&nbsp;
ResourceAccessed:GenericCLI&nbsp; EventStatus :Success&nbsp; AuditDetails :CLI
Command-&gt; utils system restart&nbsp; ComponentID :CLI App ID:Command Line
Cluster ID: Node ID:USUNITY2|<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>/var/log/active/audit/AuditApp/Audit00000005.log:05/20/2010
19:46:00.981 |LogMessage&nbsp;&nbsp; UserID :administrator&nbsp; ClientAddress
:10.45.100.35&nbsp; Severity :3&nbsp; EventType :CLICommand&nbsp;
ResourceAccessed:GenericCLI&nbsp; EventStatus :Success&nbsp; AuditDetails :CLI
Command-&gt; utils system restart&nbsp; ComponentID :CLI App ID:Command Line
Cluster ID: Node ID:USUNITY2|<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>/var/log/active/audit/AuditApp/Audit00000022.log:05/24/2010
10:08:34.371 |LogMessage&nbsp;&nbsp; UserID :administrator&nbsp; ClientAddress
:10.45.100.35&nbsp; Severity :3&nbsp; EventType :CLICommand&nbsp;
ResourceAccessed:GenericCLI&nbsp; EventStatus :Success&nbsp; AuditDetails :CLI
Command-&gt; file search activelog audit/AuditApp/* &quot;utils system
restart&quot;&nbsp; ComponentID :CLI App ID:Command Line Cluster ID: Node
ID:USUNITY2|<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>/var/log/active/audit/AuditApp/Audit00000020.log:05/24/2010
06:13:15.597 |LogMessage&nbsp;&nbsp; UserID :administrator&nbsp; ClientAddress
:10.45.100.35&nbsp; Severity :3&nbsp; EventType :CLICommand&nbsp; ResourceAccessed:GenericCLI&nbsp;
EventStatus :Success&nbsp; AuditDetails :CLI Command-&gt; utils system
restart&nbsp; ComponentID :CLI App ID:Command Line Cluster ID: Node
ID:USUNITY2|<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Search completed<o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<div>

<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>

<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Ryan Ratliff
[mailto:rratliff@cisco.com] <br>
<b>Sent:</b> Monday, May 24, 2010 10:45 AM<br>
<b>To:</b> Jason Aarons (US)<br>
<b>Cc:</b> cisco-voip@puck.nether.net<br>
<b>Subject:</b> Re: [cisco-voip] Unity Connection 7.1(2) rebooted at 1am,
wondering why<o:p></o:p></span></p>

</div>

</div>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<div>

<p class=MsoNormal>You have the syslog, application event log, and if it's an
HP server the IML is viewable via 'file view system-management-log'.<o:p></o:p></p>

</div>

<div>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

</div>

<div>

<div>

<p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif";
color:black'>-Ryan<o:p></o:p></span></p>

</div>

</div>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

<div>

<div>

<p class=MsoNormal>On May 24, 2010, at 9:54 AM, Jason Aarons (US) wrote:<o:p></o:p></p>

</div>

<p class=MsoNormal><br>
<br>
<o:p></o:p></p>

<div>

<div>

<div>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>Unity
Connection 7.1.2.20000-2 rebooted at 1am according to show status (uptime).<o:p></o:p></span></p>

</div>

<div>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>&nbsp;<o:p></o:p></span></p>

</div>

<div>

<p class=MsoNormal style='background:white'><span style='font-size:9.0pt;
font-family:"MS Shell Dlg 2","sans-serif";color:black'>In Windows I can look at
the Event Log and determin why a server rebooted, if users chose reboot they
have to type an explanation, etc. In Platform what can I look at to ascertain
why server rebooted, eg lost power vs utils systems restart, in IOS I can show
ver to determin was by &#8220;Power On&#8221; etc.</span><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p></o:p></span></p>

</div>

<div>

<p class=MsoNormal style='background:white'><span style='font-size:9.0pt;
font-family:"MS Shell Dlg 2","sans-serif";color:black'>&nbsp;</span><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p></o:p></span></p>

</div>

<div>

<p class=MsoNormal style='background:white'><span style='font-size:9.0pt;
font-family:"MS Shell Dlg 2","sans-serif";color:black'>Oddly it was at exactly
1am.</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p></o:p></span></p>

</div>

<div>

<p class=MsoNormal style='background:white'><span style='font-size:9.0pt;
font-family:"MS Shell Dlg 2","sans-serif";color:black'>&nbsp;</span><span
style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p></o:p></span></p>

</div>

<div>

<p class=MsoNormal style='background:white'><span style='font-size:9.0pt;
font-family:"MS Shell Dlg 2","sans-serif";color:black'>Ideally a show command
would be great -jason</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><o:p></o:p></span></p>

</div>

<div>

<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>&nbsp;<o:p></o:p></span></p>

</div>

</div>

<div>

<p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif"'><o:p>&nbsp;</o:p></span></p>

</div>

<div class=MsoNormal align=center style='text-align:center'><span
style='font-size:13.5pt;font-family:"Helvetica","sans-serif"'>

<hr size=1 width="100%" align=center>

</span></div>

<div>

<p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif"'><o:p>&nbsp;</o:p></span></p>

</div>

<p><strong><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif"'>Disclaimer:
This e-mail communication and any attachments may contain confidential and
privileged information and is for use by the designated addressee(s) named
above only. If you are not the intended addressee, you are hereby notified that
you have received this communication in error and that any use or reproduction
of this email or its contents is strictly prohibited and may be unlawful. If
you have received this communication in error, please notify us immediately by
replying to this message and deleting it from your computer. Thank you.</span></strong><span
style='font-size:13.5pt;font-family:"Helvetica","sans-serif"'><o:p></o:p></span></p>

<p class=MsoNormal><span style='font-size:13.5pt;font-family:"Helvetica","sans-serif"'>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></span></p>

</div>

</div>

<p class=MsoNormal><o:p>&nbsp;</o:p></p>

</div>

</body>

</html>

<HTML><BODY><P><hr size=1></P>
<P><STRONG>
Disclaimer:

This e-mail communication and any attachments may contain confidential and privileged information and is for use by the designated addressee(s) named above only.  If you are not the intended addressee, you are hereby notified that you have received this communication in error and that any use or reproduction of this email or its contents is strictly prohibited and may be unlawful.  If you have received this communication in error, please notify us immediately by replying to this message and deleting it from your computer. Thank you.
</STRONG></P></BODY></HTML>