status
/healthz from the running agent and prints it as JSON: requests proxied, upstream errors, recordings written and dropped, observer panics, events emitted, alert delivery health, the number of tracked fingerprints, and every baseline family with its sample count and whether it is warmed up. With a spec watcher armed, a spec_watch block reports each source’s last check and last error. Needs pikopod up. See Control plane for the fields.
report
inspect
--last sets how many records per upstream (default 5). Formats:
Everything
inspect prints is post-sanitizer: tokens and placeholders, never raw traffic. See Redaction.
The event log
<data_dir>/events.ndjson. See Incidents and pikopod incidents.