In an RHOSP environment, the OpenStack API shutdown agent SA_vmosr provides the function to shut down a node (instance) using the OpenStack API.
The log file is stored in the following:
/var/opt/SMAWsf/log/SA_vmosr.log