host_investigation_bundle
Investigate an ESXi host with one correlated drill-down: returns host state, cluster, VM rollup, datastores, alarms, live performance, and merged events. Use after cluster health summary flags a host.
Instructions
[READ] "What is happening around this ESXi host?" — one correlated drill-down.
Use this instead of stitching list_esxi_hosts + host_performance + get_alarms
get_events yourself. Returns one correlated bundle (not the list envelope): the host's state (connection, CPU/memory pressure, version, uptime), its cluster, a rollup of the VMs it runs, the datastores it mounts, alarms across host/cluster/datastore, live performance, and a merged event timeline. All reads are batched. Explain it in operational language; do not dump it raw.
Reach for it after cluster_health_summary flags a host. Point-in-time snapshot — no trending; for syslog lines use host_log_scan. Acting on a finding (maintenance mode, evacuate) belongs to vmware-aiops.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| hours | No | Event-timeline look-back window in hours (default 24). | |
| target | No | vCenter/ESXi target from config (default if omitted). | |
| host_name | Yes | Exact ESXi host name; unknown names return a teaching error. Get it from list_esxi_hosts or cluster_health_summary first. |