If you already know the shape of the problem, go straight to the relevant guide. If you do not, work through Triage below — it takes about two minutes and will tell you which guide to open.
Choose a guide
Queries failing or slow
Timeouts, execution errors, multi-stage engine failures, sudden latency increases, error-rate spikes.
Data not arriving
Real-time ingestion stopped or lagging, batch and minion tasks failing, tasks that never got scheduled.
Resource pressure
Out-of-memory conditions, high CPU, servers filling up, degradation after an upgrade or a traffic peak.
A failing health check
What a specific check verifies, what its diagnostic fields mean, and what to do about the failure.
Triage
Answer these in order. The first one that matches tells you where to go.1
Is the table healthy?
Open Observability → Health Dashboard in the Data Portal and find the affected table. Failing checks name the subsystem in trouble, which is usually enough to pick a guide.A failing
TABLE_INGESTION_CHECK points at Data not arriving. A failing TABLE_SEGMENT_AVAILABILITY_CHECK or BROKER_RESOURCE_CHECK points at Queries failing.See Table Health Dashboard & Alerting for how to read the dashboard, and Health checks for cluster-wide checks.Not every failing check is a fault. Some checks are best-practice recommendations that do not apply to every deployment — a check that flags a configuration you deliberately chose is telling you about a convention, not an outage. Read the check description before acting on it.
2
Is it one table, or everything?
Run a trivial query (
SELECT 1) and then a SELECT COUNT(*) against an unrelated table.If both succeed, the problem is scoped to one table or one query pattern — start with the table’s health checks. If the trivial query also fails or hangs, the problem is cluster-wide, and Resource pressure is usually the better starting point.3
What changed?
The overwhelming majority of sudden production changes follow a change somewhere. Before investigating deeply, check whether any of these happened recently:
- A cluster or engine version upgrade
- A table config, schema, or index change
- A change in your upstream source — new schema version, different partition count, a producer deploy
- A change in query volume or shape from your application
- A rebalance, reload, or scaling operation
4
Is it constant or intermittent?
A constant failure is usually configuration, schema, or capacity. An intermittent failure is usually contention, a specific data shape, or one unhealthy replica.For intermittent problems, note whether failures correlate with a time of day, a particular query, or a particular tenant — that correlation is often the whole diagnosis.
Tools you will use
Before you open a support ticket
A ticket that arrives with this information attached is typically resolved in one exchange rather than three. Collect what applies:Always
Always
- Cluster and environment, and the table name including its
_OFFLINE/_REALTIMEsuffix - When the problem started, in a stated timezone, and whether it is ongoing
- Whether it is constant or intermittent, and what fraction of requests are affected
- What changed recently — see step 3 of Triage
- The business impact, and whether a workaround is in place
For query problems
For query problems
- The full query text, unedited
- The complete error message, including any nested cause
- The
requestIdfrom the response, or fromsystem_query_log - Whether the query uses the single-stage or multi-stage engine
- Whether the same query previously worked, and roughly when it last did
- If you have Query Logger enabled, the row from
system_query_logfor a failing execution
For ingestion problems
For ingestion problems
- How far behind the data is, and whether the gap is growing, flat, or shrinking
- Whether every partition is affected or only some
- Any recent change to the upstream topic, stream, or source bucket — including partition count and schema version
- For batch and minion tasks: the task type, the task or plan ID, and the failure message
- Whether the table paused consumption, and whether it was paused deliberately
For resource problems
For resource problems
- Which component is under pressure — server, broker, controller, or minion
- Whether the pressure is memory, CPU, or disk
- When it began, and whether it coincided with a traffic change or an upgrade
- Your current tenant sizing and whether it has changed recently

