Troubleshoot EDR
When something looks wrong, start with the symptom quick index. It maps a symptom to the first tool to run and what that tool tells you.
| Your situation | Guide |
|---|---|
| Something looks wrong and you need a starting point | Symptom quick index |
| The agent won’t start, data isn’t flowing, or lag is climbing | Troubleshoot common EDR issues |
| The agent crashed or restarted and you have its log | EDR log post-mortem playbook |
Before you act on a live metrics or UI reading, cross-check it against
edr-inspect state. A metrics snapshot is point-in-time and resets each
run, so it can catch a transient at its worst instant. See
Data not flowing.
Troubleshoot common EDR issues
Symptom-to-tool quick index, agent startup errors, halted-state recovery, replication lag, and Docker-specific troubleshooting for EDR.
EDR log post-mortem playbook
Diagnose what happened to a crashed or restarted EDR agent from a captured log, using structured JSON log fields and a deterministic procedure.
Was this page helpful?
Thank you for your feedback!
Support and feedback
Thank you for being part of our community! We welcome and encourage your feedback and bug reports for InfluxDB 3 Enterprise and this documentation. To find support, use the following resources:
Customers with an annual or support contract can contact InfluxData Support. Customers using a trial license can email trial@influxdata.com for assistance.