forensic-troubleshooter

Diagnose job failures by analyzing event logs and correlating host states.

48|31|Updated Feb 2, 2026
One-click install
npx skills add https://github.com/RHEcosystemAppEng/agentic-plugins --skill forensic-troubleshooter
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: forensic-troubleshooter
Source: https://github.com/RHEcosystemAppEng/agentic-plugins/tree/main/rh-automation/skills/forensic-troubleshooter
Command: npx skills add https://github.com/RHEcosystemAppEng/agentic-plugins --skill forensic-troubleshooter

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires aap-mcp-validator, job-failure-analyzer, host-fact-inspector, resolution-advisor, execution-summary, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a streamlined process to quickly diagnose job failures in your system, offering event extraction, host correlation, and resolution advisory.

Core Features & Use Cases

  • Job Failure Analysis: Identifies the root cause of job failures, including platform, code, and configuration issues.
  • Event Extraction: Retrieves and analyzes failure events from job executions.
  • Host Correlation: Correlates errors with host system states.
  • Resolution Advisory: Provides Red Hat documentation-backed resolution steps.
  • Audit Trail: Generates an audit trail showing the steps taken during the analysis.

Quick Start

Run the forensic-troubleshooter skill with the job ID you want to investigate.

Frequently Asked Questions about forensic-troubleshooter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find the root cause of a job failure in my system?

Diagnosing job failures requires correlating host states with extracted event logs. This analysis identifies whether platform, code, or configuration issues caused the execution failure, providing targeted resolution advisory for system troubleshooting.

How does event correlation help with system troubleshooting?

Event correlation maps failure events from job executions against host system states. This process pinpoints the exact root cause of job failures by linking execution errors directly to underlying infrastructure conditions during system troubleshooting.

Do I need specific MCP servers to run job failure analysis?

Yes, job failure analysis requires access to job management and inventory management MCP servers. These servers supply the execution data and host inventory context needed to correlate events and generate resolution advisory.

Can I get Red Hat documentation-backed resolution advice for job failures?

Yes, you can obtain Red Hat documentation-backed resolution advice for job failures. The analysis generates a resolution advisory providing specific steps to fix platform, code, and configuration issues identified during event correlation.

What is the best way to troubleshoot job failures for SRE workflows?

The best way to troubleshoot job failures in SRE workflows is to automate event extraction and host correlation. This generates an audit trail of analysis steps and provides documentation-backed resolution advisory for rapid root cause identification.

Why does my job failure analysis not show the correct host states?

Job failure analysis may show incorrect host states if inventory management MCP servers are inaccessible. Accurate root cause analysis depends on retrieving valid host facts to properly correlate system states with extracted failure events.