5 Things I Check First When a Linux Server Goes Down
Discover the exact five-step triage sequence to troubleshoot unresponsive Linux servers, check network status, and avoid premature reboots.

Stock photo for illustration only, not from the actual event
- Never reboot an unresponsive server blindly to preserve vital debugging evidence.
- Verify network layer connectivity and IP stack before checking other layers.
- Analyze system load averages against total CPU core counts.
- Inspect physical memory and swap space usage for thrashing symptoms.
When a production machine drops offline or stops responding, guessing wastes precious minutes. Here is the exact five-step triage sequence to find the root cause and bring systems back online.
It was 3:15 AM on a Saturday morning when an urgent Prometheus alert vibrated, indicating that the primary application server had stopped replying to health check probes.
The first instinct during such an alert is often panic, making administrators want to rush in and hit the reboot button on every service in sight.
"Rebooting an unresponsive server without looking at its state destroys vital debugging evidence."System Administrator
Rebooting without checking state destroys ephemeral kernel buffers, process core dumps, and volatile memory allocations, risking the exact same crash during peak hours.
Through years of managing Linux systems, a strict five-step checklist was developed that takes less than five minutes and works on nearly every modern Linux distribution.
Here are the 5 things checked first whenever a Linux server crashes or stops responding.

Stock photo for illustration only, not from the actual event
Before doing anything else, verify whether the operating system actually crashed or if the machine is merely isolated from the network due to gateway drops or firewall rules.
Start from a local workstation and send ICMP packets to the server:
- Run ping commands to test network layer and IP stack responsiveness.
- Attempt an SSH connection with verbose output to check port status.
- Open cloud web consoles to log directly into virtual terminal devices.
Next, check for resource starvation, system load, and OOM killer events when commands take thirty seconds to execute or web services fail to reply.
Additional context: Linux load averages account for processes actively using the CPU, waiting for CPU time, or blocked waiting for uninterruptible disk I/O, meaning high values indicate severe CPU saturation or slow storage bottlenecks.
Source: Dev.to
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment