reply to JohnInSJ
Check your logs to see what process initiated the shutdown using the older (Legacy) APIs...