Review reboot of ESB DR servers

Title

Status

Due

Scheduled

Context

Project

Category

Notes Saved

Is this about an email?
no, it was Teams message by NCC operator.

iNeed comment:

**Investigation performed on NYVM2528.edc.un.org:** Server logs confirm a clean, graceful reboot occurred on March 31, 2026 at 16:29 with no evidence of crash, kernel panic, or malicious activity. Root cause could not be determined from OS-level logs alone as pre-shutdown logs were not preserved.

Report:

**Incident Report – NYVM2528.edc.un.org Unplanned Reboot – March 31, 2026**
On March 31, 2026 at 16:29 local time, server NYVM2528.edc.un.org (Red Hat Enterprise Linux 7.9, maintained by PSU HCO Hybrid Cloud Operations) was detected as rebooted, triggering a Critical severity, Priority 2-High alert. Investigation of available system logs confirmed that the reboot was clean and graceful, with all services shutting down in an orderly sequence. No evidence of kernel panic, hardware failure, or malicious activity was found.

Analysis of yum history, cron jobs, SSH access logs, and VMware tools logs did not reveal a definitive root cause. The kernel had not been updated since January 2021, ruling out an automated post-patch reboot. No human SSH session was recorded prior to the reboot, and no vCenter-initiated reboot request was captured in the vmtoolsd logs. Pre-shutdown OS logs were not preserved in the log archives, limiting further analysis at the OS level. The server has been running stably since the reboot with no further incidents recorded.

Supports Markdown: bold, italics, code, lists, links. Auto-saves.

📂 Activities for this Item

➕ Add Activity

Open Activities

No open activities.

Closed Activities

Review reboot of ESB DR servers

Service Requests / Work Orders

RFS-1-12869488477

Service Request

WO-RFS-1-12869488483

Normalized time tracking

Last 30 days

Logged: 0:35 · Normalized: 1:00

2026-04-08

Day total: 1:00

Normalized (1) · 1:00

Review reboot of ESB DR servers
Logged: 0:35

1:00

Time entries 0:35

Review reboot of ESB DR servers - Investigation performed on NYVM2528.edc.un.org: Server logs confirm a clean, graceful reboot occurred on March 31, 2026 at 16:29 with no evidence of crash, kernel panic, or malicious activity. Root cause could not be determined from OS-level logs alone as pre-shutdown logs were not preserved.
1:00

Review reboot of ESB DR servers
Investigation performed on NYVM2528.edc.un.org: Server logs confirm a clean, graceful reboot occurred on March 31, 2026 at 16:29 with no evidence of crash, kernel panic, or malicious activity. Root cause could not be determined from OS-level logs alone as pre-shutdown logs were not preserved.

0:35 · 09:42

Meeting Notes (Project / Context)

Select a meeting to preview details.

iNeed Text

Title

Description

ESB - Review reboot of ESB DR servers
Assign to Carlos Rodrigo - AOM DS

Asset#

Defined per context on the Taxonomy page.

Open Prompt

- Connect to https://ineedservice.un.org/erm_enu/start.swe?SWECmd=Login&SWEPL=1&SRN=YBQUIxGq9ccz7LVKJnezxs3Je6BWYmMN1w9dFiAfPc8b&SWETS=1480331200
- From Favorites section, select UNGSC AOM DS Generic SR
- Click on Continue
- Select 'UNLB47 - ICTS/ICC Technical Services/Application Operations Management' in Service/Section
- Go to Fill out Request details
- In Summary, substitute the current text with:
ESB - Review reboot of ESB DR servers
- In Describe/Justify... put the following:
ESB - Review reboot of ESB DR servers
Assign to Carlos Rodrigo - AOM DS
- Click on Submit
- Click on the SR reference for the ticket we just created to enter in the ticket
- Save the WO reference that says it was created for UNGSC AOM DS
- Open now https://ineed.un.org/
- Go to Work Order section
- Go to All my group's Work Orders, click on Search icon and in the WO # put the WO reference
- In 'Assigned To' put 'RODRIGO' and hit Tab key to save
- Click on the WO reference
- Go to Assets and click on the + button
- In asset number put 'Enterprise Service Bus' and save
- Click on the Change status button and select Status: Pending and Sub-Status: Waiting on Customer
- Provide here the RFS and WO number
- If there is already an asset # don't add another one

Close Prompt

- Open https://ineed.un.org/ and login
- Go to Work Order section
- Click on Search icon and in the WO # put the following WO reference:
WO-RFS-1-12869488483
- Click on Priority field to deselect the WO # field
- Click on the WO reference link
- Go to Assets and review that in the Asset List, there is at least one item. If not, stop.
- Click on the Change status button, which is a Hierarchy/org-chart icon located just right from the 'Form available' text
- From Status dropdown select: Closed
- From Sub-Status dropdown select: Completed
- In Comments field just below Sub-Status, write 'Completed' and click on Save

Templates

Change Title

Change Description

Change Steps

Template Notes

Communications

Label

Order

Subject

Email Body

Attachments

No attachments yet.