Search incidents by symptoms
search_incidentsUse first, whenever someone describes a failure they are seeing. Pass the symptoms as a sentence or a few words, in English or Korean; returns every reviewed public post-incident report the search finds for it, best match first: total is how many, results is one page of them in full (each with the case id, the page url and the source link), matched is every one as a row, and next_cursor fetches the next page. interpreted lists the values the sentence named, organisations included (the search moves cases carrying them up); facets count the results by root cause, component, symptom, contributing factor and organisation with the case ids, which answers 'what usually caused this' from the same call. The optional slug filters keep only cases carrying those values (AND); take slugs from facets, interpreted or vocab. Follow with get_incident for the full case.
Tool call template
This tool declares no required parameters. Add optional parameters from the input schema as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {},
"name": "search_incidents"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| org | No | Keep only cases of this organisation, by slug, e.g. github (from facets.orgs, interpreted or vocab) | |
| lang | No | ko returns the Korean text of each field where the reviewers wrote one | en |
| limit | No | Cases per page | |
| cursor | No | next_cursor from the previous page | |
| domain | No | Keep only cases in this domain, e.g. kubernetes or ai-infra | |
| factor | No | Keep only cases with this contributing factor slug, e.g. no-alerting | |
| symptom | No | Keep only cases with this symptom slug, e.g. pod-pending | |
| symptoms | No | What is observed, as a sentence or a few words, e.g. 'pods cannot get an IP, nodes show no available addresses' or 'coredns oom'. Leave it out to list every case under the slug filters, newest first; then at least one filter is required | |
| component | No | Keep only cases with this component slug, e.g. coredns | |
| root_cause | No | Keep only cases with this root cause slug, e.g. capacity |