jmagar/cortex

tools

• abuse

  Abuse hits in AI transcripts with same-session context

• abuse_incidents

  Groups abuse hits into scored incident candidates

• abuse_investigate

  Expands incidents into deterministic evidence bundles

• ack_error

  Acknowledge an error signature

• ai_correlate

  AI transcript anchors cross-referenced against non-AI logs

• anomalies

  Recent vs baseline volume/error comparison

• apps

  Distinct application names with log and host counts

• ask_history

  Search AI transcript history with nearby log context

• clock_skew

  Per-host received_at minus timestamp distribution

• compare

  Side-by-side comparison of two time ranges

• compose_doctor

  Strict Compose deployment health diagnostics

• compose_status

  Redacted read-only Compose deployment diagnostics

• context

  Surrounding logs around a log id or timestamp

• correlate

  Cross-host event correlation in a time window

• errors

  Error/warning summary by host and severity

• filter

  Structured filter-only log retrieval

• get

  One log entry by id, including raw frame

• graph

  Resolve graph entities, neighborhoods, and evidence-backed explanations

• help

  Markdown reference for all actions

• hosts

  Host registry with first/last seen

• incident_context

  Full context bundle for a known time window

• ingest_rate

  Recent ingest throughput and write-block state

• list_ai_projects

  Distinct AI projects with counts

• list_ai_tools

  Distinct AI tools with counts

• map

  Cached homelab inventory plus live host/heartbeat overlay

• notifications_recent

  Recent notification firings

• notifications_test

  Send a test notification via Apprise

• patterns

  Near-duplicate message template clusters

• project_context

  Summary for one AI project path

• search

  Full-text search with filters

• search_sessions

  Ranked grouped session search

• sessions

  AI transcript sessions by project

• silent_hosts

  Hosts whose last_seen is older than a threshold

• similar_incidents

  FTS5 cluster search over historical system logs

• source_ips

  Distinct source identifiers with hostname breakdown

• stats

  Database statistics and storage health

• status

  Lightweight runtime and DB health

• tail

  Recent log entries

• timeline

  Bucketed counts over time

• unack_error

  Revoke an error acknowledgement

• unaddressed_errors

  Repeating unacknowledged error signatures

• usage_blocks

  AI activity in 5-hour UTC windows