We had a situation early this morning brought to our attention by lack of activity on the consoles (heartbeat failures). The sessions were restarted. Upon investigation, we found some interesting messages in the out.deb and asotrace logs that occurred about a 1/2 hour prior. examples:
8/16/2022:
OUT.DEB.1
23:36:49.078 S0 P16228 T15792 C=NA Task=2 NTW Desktop: (ntw_win_proc_desktop,2000,W) AXC0547I Automation Point is shutting down in silent mode.
23:36:49.078 S0 P16228 T15792 C=NA Task=2 NTW Desktop: (ntw_win_proc_desktop,1,I) AXC0547I Automation Point is shutting down in silent mode.
23:36:49.080 S0 P16228 T6856 C=NA Task=85 XCS SUPER TASK: (win_find_dt,23,I) AXC1306I REMOTE SYSTEM terminating Automation Point
23:36:49.080 S0 P16228 T6856 C=NA Task=85 XCS SUPER TASK: (common,0,I) [XCDev::Runtime::Shutdown] Runtime shutdown
ASOTR_31.LOG (a bunch of these GLOBAL\xxxx messages)
23:36:43.043 S0 P9552 T11128 C=NA Sev=W UtilEventWait: 'Global\ASOSEM87', rc = 4158, global handle = 87, private handle = 916.
Release : 11.7
Component : Automation Point
Remote System Shutdown was requested
Silent mode refers to a "shutdown without displaying the confirmation dialog."
Review the entire log set from the APDiag during the time of the event. If there are no other messages which indicate why the shutdown was issued, then most likely the SHUTDOWN was issued via third party software, or a windows shutdown, which in turn shutdown AP in silent mode. Also, the AP desktop can be shutdown via the AP Remote Viewer. It is a menu option on the screens, under Actions where there is the option to 'Restart Automation Point' (since 11.5) and 'Shutdown Automation Point'.
To check if there was a windows shutdown, check the Windows Event logs, which should show such an event.