Just for the sake of stating this... if (according to the event log) the VC service WAS stopped... then there is no way for it to have started again on the 2nd without user intervention. Unless of course you had the service set to automatically restart (rare, and even if you did it would've done so immediately and not a full day later) Either someone noticed and started the service or you have some monitoring or automation software (SCOM, Tivoli, etc...) that started the stopped service on its own.
Check the Application Logs, Security Logs, and the System event logs. All within 10 minutes or so of the crash. You mentioned Application logs, which is why I also say System and Security should be looked at too.
Brian
Hi,
I have strictly nothing more on Windows Event Logs than :
1) Some Application logs about my Visual Cron job start.
2) The System logs stating that Visual Cron service crashed.
I extracted the logs from 2012/12/31 08h15 PM to 08h45 PM
There are no entries in the "Security" topic during that period of time.
I agree with you, about the service restart, it must have been done by someone, but at this time, I'm trying to determine why it crashed and how I can avoid it.
Maybe it's a configuration of my server, or a specific action we do, I just want to know how to investigate this in order to eliminate it in the future.
Many thanks for your help.
Edited by user
2013-01-02T14:53:33Z
|
Reason: Not specified