On a Linux machine that runs systemd, is there any way to see what or who issued a shutdown or reboot?
Linux – How to Find Out Who/What Caused a Reboot/Shutdown
linuxsystemd
linuxsystemd
On a Linux machine that runs systemd, is there any way to see what or who issued a shutdown or reboot?
Best Answer
Examine the system logs of the previous boot with
sudo journalctl -b -1 -e
.Examine
/var/log/auth.log
.Are you sure it's not one of "power interruption/spike", "CPU overheat", ....
On MY system (Ubuntu 16.04,6),
The first line shows when user
walt
did asudo shutdown now
.