Filesystem Unmounted

UNIX AIX
1

Please help me to find or how the filesystem got unmounted without our(Admin) knowledge? :confused::confused:

It was an Application filesystem and server was not rebooted.

Customer is asking the RCA that how their filesystem got umounted?

bash-3.2# uptime
  02:49PM   up 193 days,  18:59,  7 users,  load average: 2.74, 2.67, 2.67
bash-3.2#

Can any one tell me how it got unmounted?

Note: The filesystem is a part of rootvg

2

If you can't, we can't for sure. You can tighten your permissions on the system. Maybe you have more than one user which is using "root" or you have maybe assigned permissions for tasks like umount via RBAC?

You can set up auditing to track several things for the future:
IBM Systems Magazine - Monitoring Events with AIX Audit

1 Like
3

I say it might have been unmounted by mistake, since it is a rootvg's filesystem no one wants to play with it.
To know you can run last command, it will list the users name, from server hostname/IP, date and login time.

Now go to the user home directory and look into .sh_history file.

This is just one easy way of looking around.

1 Like
4

OK will enable audit thing , Thanks all