Network Inspector: Analyze
network_inspector_analyzeAggregate captured network traffic into session hotspots and rollups: counts by event type, HTTP status, top hosts, and content types. Use summary to orient before drilling into individual events.
Instructions
Aggregate the captured buffer into hotspots and rollups in one call — counts by event type, by HTTP status class (2xx/3xx/4xx/5xx), top hosts (with error counts), top content types, total HTTP/MITM transactions, error count, and the largest responses. Use this to orient on a session before drilling into individual events. Accepts the same optional filters as network_inspector_list_events (device, host, method, type, status, statusClass, contentType, errorsOnly, mitmOnly). Requires Network Inspector enabled.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | No | Optional case-insensitive substring matched against hostname, TLS SNI, or request URL. | |
| type | No | Optional event type filter. | |
| device | No | Optional Roku IP or serial. Omit to include every Roku on the hotspot. | |
| method | No | Optional HTTP method filter. | |
| status | No | One or more values to match (OR). | |
| mitmOnly | No | Only count decrypted-HTTPS transactions. | |
| errorsOnly | No | Only count HTTP transactions with a response status >= 400. | |
| contentType | No | One or more values to match (OR). | |
| statusClass | No | One or more values to match (OR). |