investigate_alert
Resolve an alert to its affected resource in a single call. Fetches the alert, matches its resource, and returns correlation details plus next-step guidance.
Instructions
[READ] Resolve one alert to its affected resource in a single call — use this instead of chaining get_alert then get_resource by hand.
Does the whole alert-to-object correlation server-side: fetches the alert, reads its resourceId, fetches that resource, and confirms the resource name and kind before suggesting anything downstream.
Returns five always-present keys: alert (Aria's values verbatim), resource (or null), correlation (both UUIDs labelled, plus confirmed name, kind and a confirmed flag), next_step (which vmware-monitor tool to call next, or null), and warnings (empty on success).
Gotchas: alert_id is the alert UUID from list_alerts, NOT the resource UUID — mixing them up is the most common error here; the correlation block labels each. An unresolvable resource degrades to a warning plus nulls rather than an error, so the alert is never lost. Never match the resource against vCenter inventory unless correlation.confirmed is true.
Args: alert_id: The alert UUID from list_alerts (not the resource UUID). target: Aria target name from config; default when omitted.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| target | No | ||
| alert_id | Yes |