I noticed that several servers rebooted early in the morning without any clear reason. I don't directly manage these servers, but I took a look at the event viewer logs and couldn't find much besides the unexpected shutdown event. Are there other places I can check to investigate why they restarted or crashed?
2 Answers
Have you checked if your UPS systems are functioning correctly? Sometimes, if they're not working properly, servers can reboot if there's an issue with power. But if your hosts weren't losing power, that might not be the case here.
You might want to check for reboot events specifically in the system logs. You can run a PowerShell function to filter for events that indicate a reboot. This can help you identify the parent process that initiated the reboot. Here's a quick script that can help you gather that info:
```powershell
function Get-RebootEvents($days){
$date = (get-date).AddDays((0 - $days))
$FilterReboot = @{ LogName = 'System'; ID = '1074'; StartTime = $date }
$events = get-winevent -FilterHashtable $FilterReboot
return $events
}
```
This should give you a clearer picture of what's happening!
Thanks for the tip! The hosts were actually running continuously, so I don’t think power loss was the issue.