How to figure out who shutdown box

[Kelly D. Grills]

On Sat, Mar 04, 2006 at 11:42:49AM -0600, Kelly D. Grills wrote:
> 
> Where are you logging security messages? I believe the default is to
> /var/log/security

Sorry, meant to say auth

> 
> Have a look at /etc/syslog.conf and syslog.conf(5)
> 
> You should see messages such as this in your security log:

Again, auth

> Mar  1 15:21:38 srv1 shutdown: reboot by kdgrills:
 
-- 
Kelly D. Grills
kdgrills at the-grills.com


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 243 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20060304/3411b953/attachment.bin