Log Error Digest
zebbern/claude-code-guide
Analyze log files to troubleshoot errors, identify peak error periods, and produce error clustering, frequency statistics, and time distribution reports.
F5 BIG-IP health monitoring - virtual server status, pool member health, log analysis, performance statistics, and systematic health assessment.
$ npx skills add automateyournetwork/netclaw --skill f5-health-check -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install automateyournetwork/netclaw f5-health-check --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .claude/skills && cp -r skills-src/workspace/skills/f5-health-check .claude/skills/f5-health-check && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "f5-health-check" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/f5-health-check into .claude/skills/f5-health-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "f5-health-check", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/f5-health-checkType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add automateyournetwork/netclaw --skill f5-health-check -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install automateyournetwork/netclaw f5-health-check --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .agents/skills && cp -r skills-src/workspace/skills/f5-health-check .agents/skills/f5-health-check && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "f5-health-check" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/f5-health-check into .agents/skills/f5-health-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "f5-health-check", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add automateyournetwork/netclaw --skill f5-health-check -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install automateyournetwork/netclaw f5-health-check --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/workspace/skills/f5-health-check .cursor/skills/f5-health-check && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "f5-health-check" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/f5-health-check into .cursor/skills/f5-health-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "f5-health-check", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/automateyournetwork/netclaw.git --path workspace/skills/f5-health-check--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add automateyournetwork/netclaw --skill f5-health-check -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install automateyournetwork/netclaw f5-health-check --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/workspace/skills/f5-health-check .gemini/skills/f5-health-check && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "f5-health-check" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/f5-health-check into .gemini/skills/f5-health-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "f5-health-check", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install automateyournetwork/netclaw f5-health-checkInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add automateyournetwork/netclaw --skill f5-health-check -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .github/skills && cp -r skills-src/workspace/skills/f5-health-check .github/skills/f5-health-check && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "f5-health-check" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/f5-health-check into .github/skills/f5-health-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "f5-health-check", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add automateyournetwork/netclaw --skill f5-health-check -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install automateyournetwork/netclaw f5-health-check --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/workspace/skills/f5-health-check .opencode/skills/f5-health-check && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "f5-health-check" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/f5-health-check into .opencode/skills/f5-health-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "f5-health-check", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
f5-health-checkF5 BIG-IP health monitoring - virtual server status, pool member health, log analysis, performance statistics, and systematic health assessment.
F5 Health Check is an agent skill from automateyournetwork/netclaw. F5 BIG-IP health monitoring - virtual server status, pool member health, log analysis, performance statistics, and systematic health assessment. Use for routine/periodic checks: checking F5 load balancer health, running a pre-change or post-change validation, a first pass on pool member failures, or auditing SSL certificate expiration. For root-cause diagnosis of an active incident (VIP down, SSL errors, iRule TCL errors), use f5-troubleshoot instead. For LTM/GTM configuration detail this skill doesn't cover —…
Its SKILL.md is about 3.7k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in DevOps & Cloud, covering Cloud networking, Statistics and Go-to-market strategy. The repository describes itself as: An AI agent that claws through your network. The licence is Apache-2.0.
8 steps, taken from the step headings in SKILL.md.
Read from SKILL.md and the folder at commit aa90e7d. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
python3From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
F5 Health Check loads about 3.7k tokens when it runs. Until then it costs about 154 tokens; SKILL.md has 1,274 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from automateyournetwork/netclaw at commit aa90e7d, republished under its Apache-2.0 licence (© automateyournetwork). 1,274 words, ~3,717 tokens.
.claude/skills/f5-health-check/SKILL.md (or your agent's skills folder).The F5 MCP server provides 6 tools. Call them via mcp-call with the required environment variables:
IP_ADDRESS=$F5_IP_ADDRESS Authorization_string=$F5_AUTH_STRING python3 $MCP_CALL "python3 -u $F5_MCP_SCRIPT" <tool_name> '{"param":"value"}'| Tool | Purpose | Key Arguments |
|---|---|---|
list_tool | List F5 objects by type | object_name, object_type (virtual/pool/irule/profile) |
show_stats_tool | Show statistics for an F5 object | object_name, object_type (virtual/pool/irule/profile) |
show_logs_tool | Show N lines of system logs | lines_number |
create_tool | Create an F5 object via POST | url_body, object_type |
update_tool | Update an F5 object via PATCH | url_body, object_type, object_name |
delete_tool | Delete an F5 object | object_type, object_name |
Always run health checks in this exact order. Each section builds on the previous one.
List all virtual servers to establish the baseline inventory.
IP_ADDRESS=$F5_IP_ADDRESS Authorization_string=$F5_AUTH_STRING python3 $MCP_CALL "python3 -u $F5_MCP_SCRIPT" list_tool '{"object_name":"","object_type":"virtual"}'Extract and report:
Flags:
offline -> CRITICAL: VIP not serving trafficunknown -> WARNING: Cannot determine healthdisabled -> INFO: Intentionally taken out of service (verify with change records)For each virtual server discovered in Step 1, collect detailed statistics:
IP_ADDRESS=$F5_IP_ADDRESS Authorization_string=$F5_AUTH_STRING python3 $MCP_CALL "python3 -u $F5_MCP_SCRIPT" show_stats_tool '{"object_name":"my_virtual_server","object_type":"virtual"}'Key metrics to evaluate:
| Metric | HEALTHY | WARNING | CRITICAL |
|---|---|---|---|
| Status availability | available | unknown | offline |
| Current connections | < 80% of connection limit | 80-95% of limit | > 95% of limit or at limit |
| Packets in/out | Non-zero, balanced ratio | Highly asymmetric (>100:1) | Zero in either direction |
| Bits in/out | Non-zero | Sudden drop >50% from baseline | Zero (no traffic flowing) |
| Total requests (HTTP VIPs) | Incrementing | Flat (stalled) | Decreasing or zero |
| Client-side connection rate | Steady or growing | Spike >200% baseline | Zero |
Thresholds:
List all pools and their members:
IP_ADDRESS=$F5_IP_ADDRESS Authorization_string=$F5_AUTH_STRING python3 $MCP_CALL "python3 -u $F5_MCP_SCRIPT" list_tool '{"object_name":"","object_type":"pool"}'Extract and report for each pool:
Flags:
offline -> CRITICAL: Pool is down, no healthy backendsoffline -> WARNING: Reduced capacity50% members
offline-> HIGH: Significant capacity degradation
disabled but not offline -> INFO: Intentionally drained (verify with change records)For each pool, collect statistics to assess utilization:
IP_ADDRESS=$F5_IP_ADDRESS Authorization_string=$F5_AUTH_STRING python3 $MCP_CALL "python3 -u $F5_MCP_SCRIPT" show_stats_tool '{"object_name":"my_pool","object_type":"pool"}'Key metrics to evaluate:
| Metric | HEALTHY | WARNING | CRITICAL |
|---|---|---|---|
| Active member count | All members active | < 75% active | < 50% active or zero |
| Current connections per member | Evenly distributed | Skewed >3:1 ratio | Single member handling all traffic |
| Server-side connections | Incrementing | Flat | Zero |
| Total requests served | Incrementing | Flat | Decreasing |
| Bytes in/out | Balanced | Asymmetric | Zero |
Connection distribution analysis:
List all profiles to document the configuration posture:
IP_ADDRESS=$F5_IP_ADDRESS Authorization_string=$F5_AUTH_STRING python3 $MCP_CALL "python3 -u $F5_MCP_SCRIPT" list_tool '{"object_name":"","object_type":"profile"}'Check for:
Flags:
List all iRules to document traffic manipulation logic:
IP_ADDRESS=$F5_IP_ADDRESS Authorization_string=$F5_AUTH_STRING python3 $MCP_CALL "python3 -u $F5_MCP_SCRIPT" list_tool '{"object_name":"","object_type":"irule"}'Check for:
Flags:
log statements in high-traffic path -> WARNING: Performance impactHTTP::collect without HTTP::release -> CRITICAL: Memory leak riskcatch blocks -> INFO: Error handling present (good practice)Pull recent system logs to detect errors and anomalies:
IP_ADDRESS=$F5_IP_ADDRESS Authorization_string=$F5_AUTH_STRING python3 $MCP_CALL "python3 -u $F5_MCP_SCRIPT" show_logs_tool '{"lines_number":"200"}'Scan for these critical patterns:
| Pattern | Severity | Meaning |
|---|---|---|
01010028 | CRITICAL | No members available for pool |
01010029 | CRITICAL | Pool member monitor status down |
0107142f | CRITICAL | SSL handshake failure |
01070417 | CRITICAL | HTTP parse error |
01060102 | HIGH | Connection rate limit reached |
01010025 | HIGH | Virtual server connection limit reached |
01071681 | WARNING | Pool member has been marked down |
01071682 | INFO | Pool member has been marked up |
01010240 | WARNING | Connection queue full |
0107143c | WARNING | SSL certificate verification failure |
01070727 | WARNING | Pool member rate limit reached |
MCP error | HIGH | Management plane communication issue |
disk_usage | WARNING | Disk space issue on BIG-IP |
memory | HIGH | Memory pressure on BIG-IP |
ha_status | CRITICAL | High availability state change |
failover | CRITICAL | HA failover event detected |
Log analysis guidelines:
If Step 7 reveals errors, pull more log lines for deeper analysis:
IP_ADDRESS=$F5_IP_ADDRESS Authorization_string=$F5_AUTH_STRING python3 $MCP_CALL "python3 -u $F5_MCP_SCRIPT" show_logs_tool '{"lines_number":"1000"}'Advanced log analysis:
Always produce a summary table after completing all steps:
F5 BIG-IP Health Report
Device: $F5_IP_ADDRESS
Date: YYYY-MM-DD HH:MM UTC
+---------------------------+----------+------------------------------------------+
| Check | Status | Details |
+---------------------------+----------+------------------------------------------+
| Virtual Servers | HEALTHY | 5/5 available, all serving traffic |
| Pool Health | WARNING | pool_web: 3/4 members active (node3 dn) |
| Connection Utilization | HEALTHY | Peak VIP at 45% connection limit |
| Traffic Distribution | HEALTHY | Even distribution across pool members |
| SSL/TLS Profiles | WARNING | www_ssl cert expires in 21 days |
| iRules | HEALTHY | 3 active, no problematic patterns |
| System Logs | HIGH | 47x 01010029 (monitor down) in last hour |
+---------------------------+----------+------------------------------------------+
Overall: WARNING -- 2 items need attention
Action Items:
1. [WARNING] Investigate pool_web node3 health check failures
2. [WARNING] Renew SSL certificate for www_ssl profile (expires in 21 days)
3. [HIGH] Investigate spike in pool member monitor-down log messagesSeverity order: CRITICAL > HIGH > WARNING > HEALTHY. Overall status = worst individual status.
When monitoring multiple F5 appliances, run the full procedure on each device and produce a fleet summary:
+------------------+----------+----------+--------+--------+-----------+
| BIG-IP | Virtuals | Pools | SSL | Logs | Overall |
+------------------+----------+----------+--------+--------+-----------+
| bigip-prod-01 | HEALTHY | WARNING | HEALTHY| HEALTHY| WARNING |
| bigip-prod-02 | HEALTHY | HEALTHY | WARN | HIGH | HIGH |
| bigip-dr-01 | HEALTHY | HEALTHY | HEALTHY| HEALTHY| HEALTHY |
+------------------+----------+----------+--------+--------+-----------+Sort devices by severity (CRITICAL first) for triage prioritization.
After completing a health check, record the session in GAIT:
python3 $MCP_CALL "python3 -u $GAIT_MCP_SCRIPT" gait_record_turn '{"artifacts":["f5-health-report.txt"],"user_text":"F5 BIG-IP health check on $F5_IP_ADDRESS","assistant_text":"Health check completed. Virtual servers: 5/5 HEALTHY. Pools: WARNING (pool_web 3/4 members). SSL: WARNING (cert expires 21 days). Logs: HIGH (47x monitor-down events). Overall: WARNING. Action items: investigate pool_web node3, renew SSL cert, investigate log spike."}'F5_MCP_SCRIPT, GAIT_MCP_SCRIPT, MCP_CALL are set and valid before assuming a data or device problem.Audit examples are illustrative. Replace their request and outcomes with observed
session evidence; inspect MCP isError, returned ok and recorded GAIT text.
© automateyournetwork, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in workspace/skills/f5-health-check of automateyournetwork/netclaw.
Open the folder on GitHubat commit aa90e7d
F5 Health Check next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| F5 Health Check this skillautomateyournetwork/netclaw | 676 | — | ~3.7k | Automated safety check: Pass | Apache-2.0 | |
| Log Error Digestzebbern/claude-code-guide | 4.7k | — | ~923 | Automated safety check: Pass | MIT | |
| Prod Log AuditJulian-adv/OpenMMO | 1.8k | — | ~1.3k | Automated safety check: Pass | Custom licence | |
| Review PRapache/shardingsphere | 21k | — | ~6.5k | Automated safety check: Pass | Apache-2.0 | |
| Kubeshark KFL2 Filter Referencekubeshark/kubeshark | 12k | — | ~3.6k | Automated safety check: Pass | Apache-2.0 | |
| Nginx To Higress Migrationhigress-group/higress | 9.5k | — | ~3.9k | Automated safety check: Pass | Apache-2.0 |
zebbern/claude-code-guide
Analyze log files to troubleshoot errors, identify peak error periods, and produce error clustering, frequency statistics, and time distribution reports.
Julian-adv/OpenMMO
Investigate OpenMMO production warnings, errors, suspicious behavior, and unresolved incidents within a deployment interval; correlate journald, nginx, and targeted evidence, then write a dated note…
apache/shardingsphere
Review Apache ShardingSphere or user-authorized downstream pull requests and PR discussions from public or authorized repository evidence.
kubeshark/kubeshark
Syntax reference for KFL2, the CEL-based display filter language used to search Kubernetes network traffic captured by Kubeshark, loaded before any filter is written.
higress-group/higress
Migrate from ingress-nginx to Higress in Kubernetes environments.
Chachamaru127/claude-code-harness
Diagnoses failing CI pipelines and tests, deciding first whether the test or the implementation is at fault, and hands hard cases to a dedicated fixer subagent.
automateyournetwork/netclaw
Entry point for designing EVE-NG network labs: classifies the request, gathers missing requirements, proposes options and validates the resulting topology.
automateyournetwork/netclaw
Deploys Cisco ACI policy changes only behind an approved ServiceNow Change Request, capturing pre and post-change fault baselines and rolling back automatically on a fault delta.
automateyournetwork/netclaw
Runs a phased health audit of a Cisco ACI fabric through MCP tools: node status, links, tenant and policy review, faults and endpoint learning.
automateyournetwork/netclaw
Validate Arista EOS network state against ANTA's pre-built 208-test catalogue, with structured pass/fail verdicts.
automateyournetwork/netclaw
Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools).
automateyournetwork/netclaw
AWS CloudWatch monitoring — metrics, alarms, log queries, VPC flow log analysis, network performance.
Categories
F5 BIG-IP health monitoring - virtual server status, pool member health, log analysis, performance statistics, and systematic health assessment. F5 Health Check is an agent skill from automateyournetwork/netclaw. F5 BIG-IP health monitoring - virtual server status, pool member health, log analysis, performance statistics, and systematic health assessment.
F5 Health Check fits situations like: routine/periodic checks: checking F5 load balancer health; running a pre-change; post-change validation; A first pass on pool member failures.
Run `npx skills add automateyournetwork/netclaw --skill f5-health-check -a claude-code`. Or copy the skill folder (workspace/skills/f5-health-check in automateyournetwork/netclaw) into .claude/skills/f5-health-check in your project. Claude Code loads it when a task matches its description.
Run `npx skills add automateyournetwork/netclaw --skill f5-health-check -a codex`. Or copy the skill folder (workspace/skills/f5-health-check in automateyournetwork/netclaw) into .agents/skills/f5-health-check in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add automateyournetwork/netclaw --skill f5-health-check -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/f5-health-check, .gemini/skills/f5-health-check, .github/skills/f5-health-check and .opencode/skills/f5-health-check in your project.
Going by SKILL.md and its folder, F5 Health Check needs the command-line tools its instructions call (python3). Our summary lists: Python 3.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
F5 Health Check is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
About 3.7k tokens (SKILL.md is roughly 15k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with F5 Health Check: Log Error Digest (zebbern/claude-code-guide, 4.7k stars), Prod Log Audit (Julian-adv/OpenMMO, 1.8k stars), Review PR (apache/shardingsphere, 21k stars) and Kubeshark KFL2 Filter Reference (kubeshark/kubeshark, 12k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
automateyournetwork (a GitHub user) maintains it in automateyournetwork/netclaw, which has 676 GitHub stars. The repository holds 120 skills in this directory. The repository was last updated on October 9, 2026.
Source: automateyournetwork/netclaw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.