I can recommend atop[1] for that. It runs every ten minutes by default and writes lots of information to &#x2F;var&#x2F;log&#x2F;atop&#x2F;atop_YYYYMMDD. With that you can examine what happend before the crash, just open a file with atop -r &#x2F;var&#x2F;log&#x2F;atop&#x2F;atop_YYYYMMDD.<p>[1] <a href="http:&#x2F;&#x2F;linux.die.net&#x2F;man&#x2F;1&#x2F;atop" rel="nofollow">http:&#x2F;&#x2F;linux.die.net&#x2F;man&#x2F;1&#x2F;atop</a>