Health¶
The Health page shows whether Watchtower itself is working. Open Health in the sidebar. A new install with no Edges opens here after sign-in.
You need a role that covers the whole organization. Otherwise the page shows "You cannot view health."
Install checks¶
The Install section lists nine checks. Each has a coloured dot and a short hint.
| Dot | Meaning |
|---|---|
| Green | The check passed. |
| Amber | Needs attention soon. |
| Red | The check failed. |
For red checks that you cannot fix in the portal, contact Privitty support through the channel listed in your Privitty agreement, or the person who runs your Watchtower platform. Owners can attach a diagnostics bundle (see below).
| Check | What it tests | If it is not OK |
|---|---|---|
| Broker | Edges and Apps can reach Watchtower's message broker. Hints: the broker is not reachable, broker is not configured. |
Edges may show offline. Contact your platform administrator. |
| Database | Watchtower can read its data. Hint: the database is not reachable. |
The portal may fail to load data. Contact your platform administrator. |
| Queue | Watchtower's internal queue is reachable. Hint: the queue is not reachable. |
Live data may be delayed. Contact your platform administrator. |
| Ca | Your install's certificate authority is set up. Hint: run wt ca init. |
Contact Privitty support. |
| Relays | The name chat. plus your Watchtower hostname resolves. Hint: chat DNS does not resolve. |
Ask whoever manages your DNS to restore the record. |
| Entitlement | The result of the last subscription check. Hints: the last check succeeded, the last entitlement check failed, refresh billing. |
Open Billing and select Refresh. If it stays red, check your subscription in AWS Marketplace. |
Mail delivery. Hints: bounce or complaint rate is above the warning line, sandbox: waiting for AWS approval, email status could not be read. |
See Email. | |
| Dns | Your Watchtower hostname resolves. Hint: the hostname does not resolve. |
Ask whoever manages your DNS to restore the record. |
| Certificates | The portal's web certificate is valid and matches your hostname. Hints: the certificate has expired, the certificate is not valid yet, the certificate name does not match the hostname, the certificate could not be read. |
Contact your platform administrator to renew or replace it. |
The Entitlement check shows the stored result of the last check. It does not run a new one.
Add your first Edge¶
When the install has no Edges, this section says "This install has no Edges yet." Select Add Edge to open the Add Edge dialog. See Edges list and Add Edge.
Email¶
The Email section shows the delivery status, then "N sent · N bounces (x.xx%) · N complaints (x.xx%)".
| Status | Meaning |
|---|---|
production |
Mail is sent normally. |
sandbox: waiting for AWS approval |
Mail is held until your email provider approves sending. Invitations can arrive late. |
smtp or log |
Mail uses your own mail server, or is only written to a log. |
Warnings appear in amber:
- "Bounce rate is above 2%."
- "Complaint rate is above 0.05%."
To find the addresses that cause them, open Users and roles and look at the Mail column.
Diagnostics¶
Owners see a Diagnostics section. It says "Collect a redacted bundle. The download link lasts 15 minutes."
- Select Collect diagnostics.
- Select Download bundle when it appears. The page shows when the link expires.
- Send the bundle to Privitty support when they ask for it.
Secrets are removed from the bundle. Collecting is refused while the subscription is restricted. See Billing and usage.