How to know which user has restarted or shutdown the redhat box?

hi guys!

I like to know which user has rebooted or shutdown a redhat box ?

the thing is wanted to know the exact user name who has done this action, ofcourse an admin privileged user only can do this. from a list of admin privileged user to find the exact one.

i used to go with last command but no user name is showing.

Thanks inadvance

I don't use redhat.

Maybe you can do this with sudo?

Hi,

The process of shutdown and restart on Linux is denied to a normal user. It can only be done by the super user or a user who has elevated sudo privileges.

Normally, if a your does a restart or shutdown using sudo , it will be logged in /var/log/secure log file.

reboot can be done from local console via three-finger-salute, without even logging in. If it was rebooted this way, there will be no way of identifying the person.

Thanks for the responses...