incident-response

Investigate and triage AEM Dispatcher runtime incidents using MCP-backed evidence.

1|Updated Jun 22, 2026
One-click install
npx skills add https://github.com/aemgdc/aemdev --skill incident-response-aemgdc
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: incident-response
Source: https://github.com/aemgdc/aemdev/tree/main/.agents/skills/incident-response
Command: npx skills add https://github.com/aemgdc/aemdev --skill incident-response-aemgdc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Diagnosing production incidents in the Adobe Dispatcher Apache HTTP Server layer of AEM as a Cloud Service is slow and error-prone when done by guesswork. This Skill provides an evidence-first workflow that correlates metrics, logs, request traces, and cache state to isolate root causes and propose safe containment and rollback. ## Core Features & Use Cases - Evidence-First Triage Workflow: Quantify impact with monitor_metrics, gather logs with tail_logs, trace requests with trace_request, and inspect cache state before concluding root cause. - Ten Incident Playbooks: Pre-built investigation paths for 5xx spikes, cache miss regressions, sudden 403 blocks, redirect loops, latency regressions, vanity URL outages, and probe/readiness failures. - Cloud Guardrails: Enforces AEMaaCS-specific rules such as reserved probe paths (/systemready, /system/probes/*), validator contracts, and CDN-vs-Dispatcher decision boundaries. - Use Case: When a deploy causes a 403 spike on legitimate URLs, trace the failing request, identify the exact filter rule denying it, and produce an incident report with probable cause, confidence level, containment, and rollback steps. ## Quick Start Ask the assistant to investigate a Dispatcher incident, for example: "We are seeing a spike of 5xx errors after the last deploy, run a full incident investigation on our AEM cloud dispatcher."

Frequently Asked Questions about incident-response

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot a 5xx spike in AEM Dispatcher?▼

Start with monitor_metrics to quantify the incident window, then use tail_logs to collect failing 5xx samples. Trace one failing URL and one healthy URL with trace_request, and correlate with validate and lint on the dispatcher config to classify the cause as Dispatcher config, cache, or backend.

How do I find which Dispatcher filter rule is blocking a URL with 403?▼

Run trace_request on the blocked URL to list every filter rule that matches in evaluation order and identify the winning deny rule. Then run lint with deep analysis on the filter section to check for ordering or shadowing issues before proposing a minimal allow rule.

Does this skill work with on-premise or AMS AEM Dispatcher setups?▼

No, this skill is scoped to AEM as a Cloud Service only. It requires the Dispatcher MCP configured for the cloud variant (AEM_DEPLOYMENT_MODE=cloud) and applies AEMaaCS-specific guardrails such as reserved probe paths and cloud validator contracts.

Why is my Dispatcher cache hit ratio dropping after a config change?▼

Use monitor_metrics to confirm the hit ratio drop, then inspect_cache on representative URLs and trace_request to compare cache-stage behavior against the cache rules. Common causes include rule ordering changes, new deny rules, or missing ignoreUrlParams strategy for query parameters.

How do I trace a full request using Dispatcher logs?▼

Use tail_logs to obtain log entries, some of which include pid and tid from dispatcher debug lines. Then call trace_request with that pid and tid to retrieve the complete log sequence for that specific request.

What should I check when /systemready or probe endpoints fail after a rewrite change?▼

Trace the failing probe path and one normal content URL with trace_request to isolate whether the regression is path-specific. Cloud-reserved paths like /systemready and /system/probes/* must not be redirected or filtered by customer rewrite rules, so restore the smallest prior-safe rewrite block.