lograft_investigate
Run the full investigation pipeline on log data, correlating with repository context to produce structured incident reports in Markdown, JSON, and HTML.
Instructions
Run the full investigation pipeline in one call: parse KQL (optional) -> normalize -> gather repo context -> correlate -> redact -> render md+json+html bundle. Either pass result={inline|path} (paste mode) OR live={workspace,subscription,table,...} (delegates to azmcp). Returns a Bundle with paths to the written files. This is the tool most users want first.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kql | No | ||
| result | No | ||
| live | No | ||
| repoPath | Yes | ||
| outDir | No | ||
| configPath | No | ||
| ticketLinkBase | No | ||
| sessionId | No |