network-incident-analyzer

What problem does it solve?

This Skill helps you quickly diagnose network connectivity, latency, and outage incidents by analyzing heterogeneous device logs and correlating events across timezones to produce a structured incident report.

Core Features & Use Cases

• Multi-format log parsing: Ingests Cisco IOS/NX-OS, Juniper JunOS, Palo Alto, F5 BIG-IP, RFC3164 syslog, and JSON-structured logs from file paths.
• Timezone normalization & correlation: Normalizes timestamps to UTC, clusters related events across devices within configurable time windows, and builds an incident timeline.
• Anomaly detection & incident reporting: Detects connection failure spikes, interface flapping, and error-rate spikes, then generates root-cause hypotheses and remediation recommendations.
• Use Case: If you receive router, firewall, and load balancer logs for a suspected outage window, you can automatically identify cascading failures (for example, BGP session loss preceding connection timeouts) and produce an executive summary for stakeholders.

Quick Start

Use the network-incident-analyzer script to analyze all log files in a directory for a specific incident window in your local timezone and write a complete incident report to an output folder.