# MySQL Normal Shutdown **URL:** \ **Category:** Other MySQL® Questions\ **Created:** [February 13, 2014, 12:03pm UTC](https://forums.percona.com/t/mysql-normal-shutdown/3273 "2014-02-13T12:03:09Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![dbasaurus](https://avatars.discourse-cdn.com/v4/letter/d/0ea827/32.png) [@dbasaurus](https://forums.percona.com/u/dbasaurus)\ **Post date:** [February 13, 2014, 12:03pm UTC](https://forums.percona.com/t/mysql-normal-shutdown/3273/1 "2014-02-13T12:03:09Z")
Does anyone know of a good way to capture who shutdown a MySQL server? I have a few servers that keep shutting down with a normal shutdown. Initially, I thought it was a bug, but Oracle is pretty adamant that it is not. Plus, I did look at the MySQL source code and the logic is pretty straight forward. it looks like someone has to issue a normal shutdown for the error log to produce that error. However, I have been unable to find the culprit. None of the logs are capturing anything… I’ve looked at messages, the audit log, mysql, last and nothing. As of today, I have enabled the general log and have taken tcpdumps. Yet, I still have been unable to capture anything. Any advice would be appreciated. ---
**Author:** ![williamt](https://avatars.discourse-cdn.com/v4/letter/w/977dab/32.png) [@williamt](https://forums.percona.com/u/williamt)\ **Post date:** [February 13, 2014, 1:34pm UTC](https://forums.percona.com/t/mysql-normal-shutdown/3273/2 "2014-02-13T13:34:02Z")
How many people have access to your box? ---
**Author:** ![yogesh777](https://avatars.discourse-cdn.com/v4/letter/y/87869e/32.png) [@yogesh777](https://forums.percona.com/u/yogesh777)\ **Post date:** [February 17, 2014, 5:25am UTC](https://forums.percona.com/t/mysql-normal-shutdown/3273/3 "2014-02-17T05:25:24Z")
At system level you need to restrict people from logging in to your system and enable system logging. For linux enable and configure sudo disable direct root login.