<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
possibly a restart initiated from the web page? forcing that to use
CLI would certainly simplify auditing. /wes<br>
<br>
On Monday, May 24, 2010 11:34:59 AM, Jason Aarons (US)
<a class="moz-txt-link-rfc2396E" href="mailto:jason.aarons@us.didata.com"><jason.aarons@us.didata.com></a> wrote:<br>
<blockquote
cite="mid:4E38DB0A1959B04C8C83EDCF069B53ED0B5262FB68@USISPCLEXDB01.na.didata.local"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"MS Shell Dlg 2";
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">The
ClientAddress:10.45.100.35 is the server itself. How
can a server SSH to itself and type utils system restart? I must be
mis-reading
this!<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">admin:file
search activelog audit/AuditApp/* "utils system
restart"<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Searching
path: /var/log/active/audit/AuditApp/*<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000120.log:04/19/2010
17:52:55.159 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI EventStatus :Success AuditDetails :CLI
Command-> utils system restart ComponentID :CLI App ID:Command Line
Cluster ID: Node ID:USUNITY2|<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000021.log:05/24/2010
09:40:50.279 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI EventStatus :Success AuditDetails :CLI
Command-> utils system restart ComponentID :CLI App ID:Command Line
Cluster ID: Node ID:USUNITY2|<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000005.log:05/20/2010
19:46:00.981 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI EventStatus :Success AuditDetails :CLI
Command-> utils system restart ComponentID :CLI App ID:Command Line
Cluster ID: Node ID:USUNITY2|<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000022.log:05/24/2010
10:08:34.371 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI EventStatus :Success AuditDetails :CLI
Command-> file search activelog audit/AuditApp/* "utils system
restart" ComponentID :CLI App ID:Command Line Cluster ID: Node
ID:USUNITY2|<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000020.log:05/24/2010
06:13:15.597 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI
EventStatus :Success AuditDetails :CLI Command-> utils system
restart ComponentID :CLI App ID:Command Line Cluster ID: Node
ID:USUNITY2|<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Search
completed<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<div>
<div
style="border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; border-width: 1pt medium medium; padding: 3pt 0in 0in;">
<p class="MsoNormal"><b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif";">From:</span></b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif";"> Ryan
Ratliff
[<a class="moz-txt-link-freetext" href="mailto:rratliff@cisco.com">mailto:rratliff@cisco.com</a>] <br>
<b>Sent:</b> Monday, May 24, 2010 10:45 AM<br>
<b>To:</b> Jason Aarons (US)<br>
<b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] Unity Connection 7.1(2) rebooted at
1am,
wondering why<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">You have the syslog, application event log, and
if it's an
HP server the IML is viewable via 'file view system-management-log'.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><span
style="font-size: 13.5pt; font-family: "Helvetica","sans-serif"; color: black;">-Ryan<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On May 24, 2010, at 9:54 AM, Jason Aarons (US)
wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<div>
<div>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif";">Unity
Connection 7.1.2.20000-2 rebooted at 1am according to show status
(uptime).<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif";"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"
style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span
style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;">In
Windows I can look at
the Event Log and determin why a server rebooted, if users chose reboot
they
have to type an explanation, etc. In Platform what can I look at to
ascertain
why server rebooted, eg lost power vs utils systems restart, in IOS I
can show
ver to determin was by “Power On” etc.</span><span
style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"
style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span
style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;"> </span><span
style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"
style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span
style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;">Oddly
it was at exactly
1am.</span><span
style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"
style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span
style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;"> </span><span
style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"
style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span
style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;">Ideally
a show command
would be great -jason</span><span
style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif";"> <o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span
style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";"><o:p> </o:p></span></p>
</div>
<div class="MsoNormal" style="text-align: center;" align="center"><span
style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";">
<hr align="center" size="1" width="100%"></span></div>
<div>
<p class="MsoNormal"><span
style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";"><o:p> </o:p></span></p>
</div>
<p><strong><span
style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";">Disclaimer:
This e-mail communication and any attachments may contain confidential
and
privileged information and is for use by the designated addressee(s)
named
above only. If you are not the intended addressee, you are hereby
notified that
you have received this communication in error and that any use or
reproduction
of this email or its contents is strictly prohibited and may be
unlawful. If
you have received this communication in error, please notify us
immediately by
replying to this message and deleting it from your computer. Thank you.</span></strong><span
style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";">_______________________________________________<br>
cisco-voip mailing list<br>
<a moz-do-not-send="true" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a moz-do-not-send="true"
href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<hr size="1">
<p><strong>Disclaimer:
This e-mail communication and any attachments may contain confidential
and privileged information and is for use by the designated
addressee(s) named above only. If you are not the intended addressee,
you are hereby notified that you have received this communication in
error and that any use or reproduction of this email or its contents is
strictly prohibited and may be unlawful. If you have received this
communication in error, please notify us immediately by replying to
this message and deleting it from your computer. Thank you.
</strong></p>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
cisco-voip mailing list
<a class="moz-txt-link-abbreviated" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>
<a class="moz-txt-link-freetext" href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a>
</pre>
</blockquote>
<br>
</body>
</html>