Server shut down

[linux00]

I have four servers running windows 2003 and they are at different sites running as Domain Controllers... In one server I have IT assistant installed and on the other three I have open Manage... One server always reports to be shutting down, but when I checked the log nothing happens... I want to setup a log server to monitor what really happens on that server... can anybody help me on how to setup a log server...Thanks

 

[itsp1965]

Usually a shutdown that is initiated by a process/user is logged in the System eventlog with an ID of 6008. What exactly are u trying monitor here, that it is a false alarm or that it is actually shutting down?

 

[linux00]

Yes I am trying to monitor why IT assistant is reporting a shutdown... I am pretty sure that its a false alarm since I don't see anything in the logs... But I want to know if it is losing network connectivity for a while and thats why IT assistant does not see the system or what else could it be happenning... That's what I want to monitor

 

[itsp1965]

Well if your IT Assistant software relies on a network heartbeat to tell you if the server is down.. then yes it is most likely a false alarm. We use Tivoli Endpoint Monitoring and it's the same deal. You may need to increase the timeout on the heartbeat in terms of how long it takes before a server considered down.