Query Splunk Cloud's azure_audit index to identify Azure VM provisioning events.
npx skills add https://github.com/jwmossmoz/agent-skills --skill splunk-jwmossmoz
Please help me install this Agent Skill. Skill: splunk Source: https://github.com/jwmossmoz/agent-skills/tree/main/skills/splunk Command: npx skills add https://github.com/jwmossmoz/agent-skills --skill splunk-jwmossmoz
This skill enables analysts to access Mozilla Splunk Cloud and retrieve Azure activity logs to understand VM provisioning and lifecycle events for Taskcluster workers, bridging gaps between Azure actions and worker-manager signals.
Start by running a Splunk search against index=azure_audit for a specific RG and time window to begin investigating a VM provisioning event.
High-intent search queries and answers about installing and using this skill.
Query the azure_audit index in Splunk Cloud to identify Azure provisioning events for Taskcluster worker VMs, revealing VM writes, starts, and deletes. Search specific resource groups like RG-TC-GECKO-T-WIN11-64-25H2 to retrieve results.
Diagnose OSProvisioningTimedOut failures by querying Splunk Cloud's azure_audit index for VM provisioning events. Correlate these Azure activity logs with worker-manager signals to bridge gaps and identify the root cause of the timeout.
Yes, you can use Splunk Web automation via browser-harness to script and repeat investigations for different Taskcluster pools or time windows. This allows you to systematically query the azure_audit index across various resource group patterns.
Build a VM end-to-end timeline by querying the azure_audit index in Splunk Cloud for VM writes, starts, and deletes. Retrieve these Azure activity logs and correlate them with tc-logview and papertrail to map the full VM lifespan and provisioning outcomes.
Yes, querying Splunk Cloud for Azure activity logs uses browser-harness to drive Splunk Web in authenticated Chrome sessions. This approach automates the retrieval of azure_audit index data to investigate VM provisioning and lifecycle events.
crycriMControl Chrome browser automation through the Chrome DevTools Protocol using Python.
jwmossmozTrace Windows Taskcluster worker readiness latency from provisioning to workerReady using tc-logview, Papertrail, Splunk, Yardstick, and in-VM logs.
opensearch-projectCorrelate OpenTelemetry traces, logs, and metrics using shared fields and PPL queries.
jwmossmozQuery and retrieve in-VM Taskcluster worker logs from SolarWinds Observability.
