Mysterious GWIA unloading

[sstoppel]

For the last two days both my primary and secondary GWIA have been unloaded when I came in to work.

There is no indication in the console buffer that someone forced an unload. The GWIA logs show nothing. There are no CRONed unloads. I really don't know where to begin. It seems very odd that GWIAs on two separate boxes could be unloading at the same time.

Not to be paranoid, but I really think someone is out to get me. Can anyone help me figure this out?

 

[sstoppel]

Never mind, I am a dumbass. As soon as I hit submit post I figured it out.

We had a policy change regarding our backup window, and I set the users to force a logout in the night, but I forgot to exclude the account the GWIA uses to connect to the domain.

I was right - someone was out to get me. Me.