Needs attention

The Needs attention tile on the dashboard counts what is wrong on the server or in a hosting account and shows the most serious problems first; Show all opens the full list. Problems are things like a certificate about to expire, mail DNS records that are missing, a site on a PHP version that gets no more security fixes, or a service that stopped. Each problem says which account it belongs to and links to the page where you fix it.

Checked every 30 minutes. The checks run in the background, so the dashboard opens at once. Check now on the tile runs them immediately (it takes a few seconds), for example after you fixed something.

What is checked

In every hosting account:

CheckReported when
SSL certificatesA main or addon domain has no certificate, a self-signed one, one that expired, or one that expires within 14 days. Let's Encrypt certificates renew 30 days ahead, so 14 days left means the renewal is failing. The server's own hostname is checked too.
Mail DNSFor accounts with email: no MX record (critical - no mail arrives), or SPF, DKIM or DMARC missing, or a DKIM record that does not match the key the server signs with. The records are asked at the domain's own name server. Check & fix opens the details and can add the missing records at your DNS provider.
PHP versionsA site (main or addon domain) runs a PHP version whose security support has ended, or ends within 90 days. The default PHP version for new accounts is checked as well. The message lists the supported versions installed on the server.
Disk quotaAn account with a quota uses 90% of it (warning) or all of it (critical).
WordPressA site runs an older WordPress than the latest release (checked against wordpress.org once a day), or has plugin updates waiting as of the last time the site was opened in the WordPress Toolkit.

On the server:

CheckReported when
Disk space/, /home or /var is 90% full (critical at 95%).
ServicesA service listed on the Services page is installed but not running, or has failed.
Nightly backupNo nightly remote backup is set up (info), the last run had failures, or no backup has finished for two days (critical).
Mail blocklistsThe server's IP address is listed on Spamhaus ZEN, SpamCop or Barracuda, so other servers may reject its mail. Lists that refuse to answer the server's DNS resolver are skipped rather than reported.
Mail queue200 or more messages are waiting (critical at 1,000) - usually a remote server refusing mail, or an account sending spam.
Webmail and phpMyAdminRoundcube or phpMyAdmin is older than its latest release. The message shows the command that updates it.
Reboot and Reqad updatesListed on the command line; on the dashboard these keep their own banners with the Reboot and Update buttons.

Severity

LevelMeaning
CriticalSomething is broken now or about to break: an expired certificate, no MX record, a stopped service, a full disk, no recent backup.
WarningIt works, but it is a risk: a self-signed certificate, missing SPF/DKIM/DMARC, an end-of-life PHP version, outdated software.
InfoWorth knowing: support for a PHP version ends soon, plugin updates are waiting, no nightly backup is set up.

When one check finds three or more problems of the same level - several sites on an old PHP version, say - the list shows them as one row with the accounts involved. Click it to see each one.

Hiding a problem

Some problems are expected: a test site with a self-signed certificate, or a domain whose mail is handled elsewhere. Hide on a row in the full list takes it off the dashboard for 7 days, for 30 days, or until you show it again. If it is still a problem when the time is up, it comes back. Hidden problems are counted at the bottom of the list, where you can show them and bring one back with Show again.

A problem that is fixed disappears by itself the next time the checks run.

On the command line

reqad health list                    # what the last run found
reqad health list --account=bob      # one account ('-' = the server itself)
reqad health run                     # check now
reqad health dismiss ssl:bob:bob.example --days=30
reqad health restore ssl:bob:bob.example

reqad health list --json gives the same list for scripts and monitoring. See Command line for every option.


Need a hand? Create a free account or contact us.