<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">CLI logs would confirm if the reset was truly done from the CLI, as opposed to audit logs.<div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div>-Ryan</div></span>
</div>
<br><div><div>On May 24, 2010, at 12:06 PM, Wes Sisk wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<div bgcolor="#ffffff" text="#000000">
possibly a restart initiated from the web page? forcing that to use
CLI would certainly simplify auditing. /wes<br>
<br>
On Monday, May 24, 2010 11:34:59 AM, Jason Aarons (US)
<a class="moz-txt-link-rfc2396E" href="mailto:jason.aarons@us.didata.com"><jason.aarons@us.didata.com></a> wrote:<br>
<blockquote cite="mid:4E38DB0A1959B04C8C83EDCF069B53ED0B5262FB68@USISPCLEXDB01.na.didata.local" type="cite">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"MS Shell Dlg 2";
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1"><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">The
ClientAddress:10.45.100.35 is the server itself. How
can a server SSH to itself and type utils system restart? I must be
mis-reading
this!<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">admin:file
search activelog audit/AuditApp/* "utils system
restart"<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Searching
path: /var/log/active/audit/AuditApp/*<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000120.log:04/19/2010
17:52:55.159 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI EventStatus :Success AuditDetails :CLI
Command-> utils system restart ComponentID :CLI App ID:Command Line
Cluster ID: Node ID:USUNITY2|<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000021.log:05/24/2010
09:40:50.279 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI EventStatus :Success AuditDetails :CLI
Command-> utils system restart ComponentID :CLI App ID:Command Line
Cluster ID: Node ID:USUNITY2|<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000005.log:05/20/2010
19:46:00.981 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI EventStatus :Success AuditDetails :CLI
Command-> utils system restart ComponentID :CLI App ID:Command Line
Cluster ID: Node ID:USUNITY2|<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000022.log:05/24/2010
10:08:34.371 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI EventStatus :Success AuditDetails :CLI
Command-> file search activelog audit/AuditApp/* "utils system
restart" ComponentID :CLI App ID:Command Line Cluster ID: Node
ID:USUNITY2|<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">/var/log/active/audit/AuditApp/Audit00000020.log:05/24/2010
06:13:15.597 |LogMessage UserID :administrator ClientAddress
:10.45.100.35 Severity :3 EventType :CLICommand
ResourceAccessed:GenericCLI
EventStatus :Success AuditDetails :CLI Command-> utils system
restart ComponentID :CLI App ID:Command Line Cluster ID: Node
ID:USUNITY2|<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Search
completed<o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<div>
<div style="border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; border-width: 1pt medium medium; padding: 3pt 0in 0in;"><p class="MsoNormal"><b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";">From:</span></b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";"> Ryan
Ratliff
[<a class="moz-txt-link-freetext" href="mailto:rratliff@cisco.com">mailto:rratliff@cisco.com</a>] <br>
<b>Sent:</b> Monday, May 24, 2010 10:45 AM<br>
<b>To:</b> Jason Aarons (US)<br>
<b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] Unity Connection 7.1(2) rebooted at
1am,
wondering why<o:p></o:p></span></p>
</div>
</div><p class="MsoNormal"><o:p> </o:p></p>
<div><p class="MsoNormal">You have the syslog, application event log, and
if it's an
HP server the IML is viewable via 'file view system-management-log'.<o:p></o:p></p>
</div>
<div><p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div><p class="MsoNormal"><span style="font-size: 13.5pt; font-family: "Helvetica","sans-serif"; color: black;">-Ryan<o:p></o:p></span></p>
</div>
</div><p class="MsoNormal"><o:p> </o:p></p>
<div>
<div><p class="MsoNormal">On May 24, 2010, at 9:54 AM, Jason Aarons (US)
wrote:<o:p></o:p></p>
</div><p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<div>
<div><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif";">Unity
Connection 7.1.2.20000-2 rebooted at 1am according to show status
(uptime).<o:p></o:p></span></p>
</div>
<div><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif";"> <o:p></o:p></span></p>
</div>
<div><p class="MsoNormal" style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;">In
Windows I can look at
the Event Log and determin why a server rebooted, if users chose reboot
they
have to type an explanation, etc. In Platform what can I look at to
ascertain
why server rebooted, eg lost power vs utils systems restart, in IOS I
can show
ver to determin was by “Power On” etc.</span><span style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div><p class="MsoNormal" style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;"> </span><span style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div><p class="MsoNormal" style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;">Oddly
it was at exactly
1am.</span><span style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div><p class="MsoNormal" style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;"> </span><span style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div><p class="MsoNormal" style="background: white none repeat scroll 0%; -moz-background-clip: -moz-initial; -moz-background-origin: -moz-initial; -moz-background-inline-policy: -moz-initial;"><span style="font-size: 9pt; font-family: "MS Shell Dlg 2","sans-serif"; color: black;">Ideally
a show command
would be great -jason</span><span style="font-size: 11pt; font-family: "Calibri","sans-serif";"><o:p></o:p></span></p>
</div>
<div><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif";"> <o:p></o:p></span></p>
</div>
</div>
<div><p class="MsoNormal"><span style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";"><o:p> </o:p></span></p>
</div>
<div class="MsoNormal" style="text-align: center;" align="center"><span style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";">
<hr align="center" size="1" width="100%"></span></div>
<div><p class="MsoNormal"><span style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";"><o:p> </o:p></span></p>
</div><p><strong><span style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";">Disclaimer:
This e-mail communication and any attachments may contain confidential
and
privileged information and is for use by the designated addressee(s)
named
above only. If you are not the intended addressee, you are hereby
notified that
you have received this communication in error and that any use or
reproduction
of this email or its contents is strictly prohibited and may be
unlawful. If
you have received this communication in error, please notify us
immediately by
replying to this message and deleting it from your computer. Thank you.</span></strong><span style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";"><o:p></o:p></span></p><p class="MsoNormal"><span style="font-size: 13.5pt; font-family: "Helvetica","sans-serif";">_______________________________________________<br>
cisco-voip mailing list<br>
<a moz-do-not-send="true" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a moz-do-not-send="true" href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><o:p></o:p></span></p>
</div>
</div><p class="MsoNormal"><o:p> </o:p></p>
</div>
<hr size="1"><p><strong>Disclaimer:
This e-mail communication and any attachments may contain confidential
and privileged information and is for use by the designated
addressee(s) named above only. If you are not the intended addressee,
you are hereby notified that you have received this communication in
error and that any use or reproduction of this email or its contents is
strictly prohibited and may be unlawful. If you have received this
communication in error, please notify us immediately by replying to
this message and deleting it from your computer. Thank you.
</strong></p>
<pre wrap=""><hr size="4" width="90%">
_______________________________________________
cisco-voip mailing list
<a class="moz-txt-link-abbreviated" href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a>
<a class="moz-txt-link-freetext" href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a>
</pre>
</blockquote>
<br>
</div>
</blockquote></div><br></div></body></html>