| name | last9-investigate-alert |
| description | Investigate a firing alert using Last9 observability data |
Investigate Alert
When the user mentions a firing alert or wants to investigate an alert:
-
List active alerts — call get_alerts to see all currently firing alerts with severity, rule name, and current values.
-
Get alert config — call get_alert_config with the rule ID to understand what threshold or condition triggered the alert.
-
Check the affected service — use get_service_performance_details for the service mentioned in the alert to see current performance metrics.
-
Correlate with deployments — call get_change_events to check if a recent deploy caused the alert.
-
Check logs around the alert time — use get_service_logs filtered to the time window when the alert fired.
-
Suggest remediation — based on findings, suggest specific actions: rollback a deploy, scale a service, fix a query, etc.