agenticops-chat

Linux system administration troubleshooting — covers process management, disk I/O analysis, memory troubleshooting, network diagnostics, SSH operations, log analysis, and performance tuning. Includes decision trees for CPU high, memory pressure, disk issues, network problems, SSH connectivity, and service failures.

AWS compute troubleshooting — covers EC2 (launch failures, instance status checks, EBS issues, networking), ECS (task placement, service events, container health), EKS (node scaling, cluster issues), and Lambda (cold starts, timeouts, concurrency, memory tuning). Includes decision trees for common failure modes.

Search the open web (DuckDuckGo) and fetch public URLs — status pages, docs, CVE data, changelogs. Provides web_search + web_fetch tools with security controls (private-IP blocking, size limits, timeouts). Use when investigation needs external internet information and you may not know the exact URL.

Local filesystem operations — read configs, tail logs, search files, list directories, inspect file metadata, and write files. Provides secure access to local operational artifacts (Terraform, CloudFormation, Kubernetes manifests, systemd units, nginx configs, application properties, log files). Includes security blocklists for sensitive files.

Kubernetes administration and troubleshooting — covers pod debugging (CrashLoopBackOff, OOMKilled, ImagePullBackOff, Pending), node issues, CNI/networking, CoreDNS, PVC/storage, HPA/VPA autoscaling, and EKS-specific patterns. Includes decision trees for common failure modes.

Read and analyze documents — PDF, DOCX, Markdown, HTML, CSV, XLSX, JSON, YAML. Provides read_document tool with no output truncation and page-range support for PDFs. Use when the user shares a document or asks to explain, summarize, or extract information from files.

AWS security posture assessment and incident response — covers IAM analysis (overprivileged roles, unused credentials, MFA gaps), Security Hub findings, GuardDuty threats, Inspector vulnerabilities, S3 public access, SG/NACL misconfigurations, KMS key rotation, WAF rules, Config compliance, and CloudTrail integrity.

Send notifications and distribute formatted reports to channels (Feishu, Slack, Email, SES, SNS, DingTalk, WeCom, Webhook). Supports batch multi-channel delivery with format-aware conversion (HTML, PDF, Markdown). Activate to gain send and distribute tools.

Distributed trace analysis via Jaeger — cross-service causal chain construction, latency bottleneck identification, error propagation tracking. Provides 4 trace query tools and decision trees for investigating cascading failures across microservices.

Kubernetes administration and troubleshooting — covers pod debugging (CrashLoopBackOff, OOMKilled, ImagePullBackOff, Pending), node issues, CNI/networking, CoreDNS, PVC/storage, HPA/VPA autoscaling, and EKS-specific patterns. Includes decision trees for common failure modes.

Elasticsearch and OpenSearch cluster operations and troubleshooting — covers cluster health (red/yellow/green), shard allocation failures, slow queries and DSL optimization, index lifecycle management, JVM heap pressure, circuit breakers, snapshot/restore, reindex operations, and node diagnostics.

AWS storage troubleshooting — covers S3 (access denied, replication, lifecycle), EBS (IOPS limits, burst credits, snapshots), EFS (mount issues, throughput modes, burst credits), and FSx. Includes decision trees for performance issues, access problems, and cost optimization.

Database administration and troubleshooting for RDS (MySQL, PostgreSQL, Oracle, SQL Server), DynamoDB, ElastiCache/Redis — covers slow queries, connection issues, replication lag, deadlocks, storage full, backup/restore, parameter tuning, and performance optimization.

Log analysis and troubleshooting — covers CloudWatch Logs Insights queries, Kubernetes pod logs, system logs (journald, syslog), application log patterns, error correlation, and log-based metrics. Includes query templates for common investigation scenarios.

Monitoring and observability troubleshooting — covers CloudWatch alarms, metrics, dashboards, Prometheus/Grafana patterns, alert fatigue reduction, metric gap analysis, coverage assessment, SLI/SLO definitions, and anomaly detection strategies.

CCIE-level network engineering troubleshooting — covers routing, switching, firewall analysis, VPN diagnostics, load balancing, MTU analysis, TCP/IP diagnostics, and AWS VPC networking. Includes decision trees for connectivity failures, latency issues, packet loss, and DNS problems.