Investigate Error Spike
investigate_error_spikeCompare recent error rates against a baseline to confirm a spike, then rank top contributing services, models, and error types.
Instructions
Investigate an error-rate spike: compare a recent window against a baseline and rank which services/models/error types contributed most.
is_spike requires both an absolute error-count floor and a relative rate-multiplier to hold, so a tiny sample (e.g. 1 error becoming 2) doesn't read as a spike.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of traces to analyze per window (default: 1000) | |
| top_n | No | Maximum ranked contributors to return per breakdown (default: 5, max: 50) | |
| recent_end | Yes | Recent window end time in ISO 8601 format | |
| baseline_end | No | Baseline window end (ISO 8601) | |
| recent_start | Yes | Recent window start time in ISO 8601 format | |
| service_name | No | Filter by service name (applied to both windows) | |
| baseline_start | No | Baseline window start (ISO 8601). If omitted along with baseline_end, auto-computed as the same duration immediately preceding recent_start. | |
| min_error_count_increase | No | Minimum absolute error-count increase to count as a spike (default: 3) | |
| rate_multiplier_threshold | No | Minimum error-rate multiplier (recent / baseline) to count as a spike (default: 2.0) |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |