How to find who rebooted the Linux server ??
The below steps will help to find out who or when the server had rebooted last time. Once the server had panic reboot or some one rebooted system admin need to find out why/ who and when the server had rebooted.
Hope the below will help to find out the things.
1. last command
#last |grep -i reboot
2. who –b
This command displays the time of last system boot and who logged on.
3.See these users shell history files in ~username/.bash_history for su or sudo commands.
# cat /var/log/boot.log
- and check the syslog started" time stamp
6. grep reboot /home/*/.bash_history
>> Now you can get which user rebooted the server.