Linux Shutdown Command and Logfile
In the enterprise Linux network, it is necessary to keep track of server shutdown and reboot time. Most of you may have used the shutdown / reboot command.
Show listing of last reboot / shutdown date and time
last command searches back through the file /var/log/wtmp (or the file designated by the -f flag) and displays a list of all users logged in (and out) since that file was created. The pseudo user reboot logs in each time the system is rebooted. Thus last reboot will show a log of all reboots since the log file was created.
Shutdown (halt) system immediately
Type the command as follows:
# shutdown -h 0
However on production server above command is dangerous as it won't allow users to save files/work/data. It is better to give users a warning and then take down the box:
# shutdown +5 "*** Server is going DOWN for hard disk replacement!!! Please save all your work ***"
Schedules shutdown command
You can also schedules shutdown with shutdown command
# shutdown 1:00 SERVER DOWN"
# shutdown 18:00 SERVER DOWN"
First one will shutdown server at 1:00 AM and second will be at 6:00 PM (it uses 24 hrs clock format)
How do I find out serve shutdown / reboot time?
Now most exciting part, how will you find out when system was last rebooted or halted (shutdown). Often new UNIX/Linux admin don't find out solution easily. When ever you issue shutdown/reboot command a entry created in /var/log/wtmp file, don't open or modify this binary data file. You can read this log file with the help of last command.
Display list of last reboot entires
Use last command as follows:
last reboot | less
Display list of last shutdown entires (includes run level changes):
Type the command as follows:
last -x| less
Or even better try:
# last -x | grep shutdown |less
Note file /var/log/wtmp is log file which stores previous login sessions and use last command to access information. Same commends works on FreeBSD and other UNIX like oses.
Related previous topics:
- Linux : Desktop – How to shutdown, restart or logoff gnome via command/Launcher
- Create linux shutdown account to halt Linux server
- Please note that last command is also available with other UNIX like oses.
Want to stay up to date with the latest Linux tips, news and announcements? Subscribe to our free e-mail newsletter or RSS feed to get all updates.
You can Email this page to a friend.
You may also be interested in other helpful articles:
- How to: Allow any users to Shutdown Linux server
- Linux Disable the Ctrl-Alt-Delete shutdown keys
- Linux Save the output of a command in a logfile
- Shutdown account to shutdown Linux server
- Schedule Windows server to reboot or shutdown automatically
Discussion on This Article:
Leave a Reply
We encourage your comments, and suggestions. But please stay on topic, be polite, and avoid spam. Thank you very much for stopping by our site!
Tags: enterprise_linux, last_command, last_reboot_time, last_shutdown_time, linux_network, pseudo, reboot, server_shutdown, shutdown_command, var_log_wtmp_file, wtmp



Hi! I’m try to find out the answer on this question.
What is the file that control shutdown in Linux?
Hopefully you can give answer.
/etc/shutdown.allow, /fastboot, and /etc/inittab. Try man shutdown for info.