Linux server problem? First checks before you call for help
When a Linux server is down or misbehaving and nobody on the team owns it, the hard part is knowing where to start. This guide covers the checks worth running first, what to write down, and when to bring in help.
Key takeaway
Most first checks take a few minutes: disk, memory, services, logs and recent changes. Write down what you find and what changed recently. That record saves time, whether you fix the problem yourself or hand it over.
1. Note what changed
Before you touch anything, write down:
- what stopped working, and when you first noticed it
- the exact error message, or a screenshot of it
- anything that changed recently: updates, deploys, DNS, certificates or firewall rules
2. Check disk space
A full disk breaks databases, logs and uploads in confusing ways.
df -h
df -i # inodes can run out even with free space
sudo du -xh /var --max-depth=1 | sort -h3. Check memory and load
free -h
uptime
top # press q to quitLook in the kernel log to see whether the out-of-memory killer has stopped a process:
sudo journalctl -k | grep -i "out of memory"4. Check the service
systemctl status nginx # swap in your service name
sudo journalctl -u nginx --since "1 hour ago"
systemctl --failedIf you run Docker:
docker ps -a
docker logs --tail 100 <container>5. Check the network and certificates
ss -tlnp # what is listening, and on which port
curl -I https://your-domain.exampleAn expired certificate or a firewall change often looks like "the site is down". Check the dates on the certificate:
echo | openssl s_client -connect your-domain.example:443 -servername your-domain.example 2>/dev/null | openssl x509 -noout -dates6. Be careful with restarts
Restarting a service can bring it back, but it can also wipe out the evidence of what went wrong. Before you restart, save the output of the checks above, and avoid rebooting a production server if you're not sure it will come back up cleanly.
When to get help
Get outside help when:
- the cause isn't clear after the checks above
- the fix means changing configuration you don't fully understand
- the problem keeps coming back
- the server holds data you can't afford to lose
Where I can help
A troubleshooting session is £150 for up to 90 minutes on one agreed problem. I investigate, make any safe fixes that fit within that time, and give you written findings and next steps. A complete fix isn't guaranteed in the session, and it isn't emergency incident response.
I also work with agencies and IT providers on their clients' servers. I can make approved changes myself, or give clear instructions to your team.
Practical next step
Write down the problem and your notes from step 1, then book a troubleshooting session.