Troubleshooting¶
Troubleshooting
Use this section to diagnose problems with monitoring, alerting, and account configuration.
Where to look first¶
| Symptom | Where to start |
|---|---|
| Not receiving alert emails | Email deliverability |
| Alert fired once, then went silent | Alert deduplication |
| Alert rule never fires | CEL rule evaluation |
| Certificate monitor shows connection error | TLS and STARTTLS connectivity |
| Domain not appearing in CT-Log matches | CT-Log: no matches |
| DNS changes not being detected | DNS: changes not detected |
| Can't create more resources | Quota limits |
| API returning 401 or 403 | API authentication errors |
Quick checks¶
Alerts not arriving? Check in order:
- Is the alert rule enabled?
- Is the alert template enabled?
- Is the recipient email address correct in the template?
- Is the dedup window preventing re-delivery? (Default: 24 hours)
- Is the template in batch mode? (Emails are held until the interval elapses)
- Does the CEL condition actually match the event?
Certificate monitor failing?
- Is the target IP reachable on the configured port?
- Is the port a STARTTLS protocol port (SMTP 25/587, IMAP 143, POP3 110, LDAP 389)?
- If using a self-signed certificate, is the root CA configured on the monitor?
FAQ¶
See FAQ for common questions in short-answer format.