EMR recovery technical note
The EMR is unavailable. Which layer actually failed?
A failed server and a damaged database are not the only possibilities. The EMR may depend on physical or virtual storage, an operating system, database services, one or more databases, image or document repositories, network paths, licenses, and application services.
Replacing or restarting the host can restore a healthy service failure. It cannot prove that the storage, database, repository, and application state are complete. Identify the lowest working layer before deciding what to repair.
Map the dependency chain
The first visible error may be several layers above the initiating failure.
Test from the lowest available layer upward. A working layer narrows the problem; it does not validate every layer above it.
The recovery boundary
A rebootable server is not the same as a recovered EMR.
Routine service restoration is appropriate when the data sources are stable and verified. Recovery becomes necessary when required records remain inaccessible, a restore or repair has failed, or another action would change the only trustworthy source.
- 1
Name the unavailable operation
Identify whether staff cannot reach charts, schedules, billing, images, documents, prescriptions, reports, or the entire application.
- 2
Record the lowest working layer
Note whether the array, volume, filesystem, VM, operating system, database service, database, repository, and EMR each work.
- 3
Protect every source version
Separate original storage, images, VM copies, databases, logs, backups, exports, repository copies, and repair outputs by source and time.
- 4
Restore access in dependency order
Establish stable storage first, then evaluate the host, database, repository, and application without overwriting the best surviving evidence.
Route the failed condition
Choose the layer that prevents access now.
EMR access has not returned?
Tell ADR the lowest layer that works and the records needed first.
Include the server or VM, storage and controller state, database status, repositories, backups, restoration attempts, application symptoms, and any custody requirements.