Q- I want to find the user who has Rebooted the Linux Box First type “last” and you should get some idea.==Audit logs or messages/syslog should have logged the reboot command. You could try a grep for “shutdown -r ”====grep reboot /home/*/.bash_historyyou can get which user rebooted the server.

[[ This is a content summary only. Visit my website or Click on the Title link for full Article, other content, and more! ]]