Jun 16, 2026, 9:09 AM

This commit is contained in:
Paweł Domański
2026-06-16 07:09:45 +00:00
parent dd27530650
commit 56a05bd7f8
17 changed files with 26 additions and 212 deletions
+3
View File
@@ -1,3 +1,6 @@
---
_archived: true
---
Problem:
INC0794075 - XMBILLING process is very slow in recent days
Binary file not shown.

Before

Width:  |  Height:  |  Size: 22 KiB

+3 -1
View File
@@ -1,8 +1,10 @@
---
type: 'DailyNote'
title: October 7, 2025
date: '2025-10-07T00:00:00.000Z'
tags: [dba, migracja]
type: Meeting
Status: Archived
_archived: true
---
### Uporządkowane notatki ze spotkania
@@ -1,3 +1,8 @@
---
type: Meeting
Status: Archived
_archived: true
---
Meeting notes
Incident management
- Mariusz reported receiving multiple daily Splunk alerts about disk usage, resulting in duplicate incidents that affect statistics.
@@ -1,3 +1,8 @@
---
type: Meeting
Status: Archived
_archived: true
---
# Notatki ze spotkania (Bi-weekly DevOps)
**Data:** 13.05.2026
@@ -1,3 +1,8 @@
---
type: Meeting
Status: Archived
_archived: true
---
📝 Notatka ze spotkania: Local Swiss System Piccard
Cel spotkania: Ujednolicenie oczekiwań oraz planu działań w związku z niedawnymi incydentami wydajnościowymi w systemie Piccard i innych systemach szwajcarskich.
@@ -1,3 +1,8 @@
---
type: Meeting
Status: Archived
_archived: true
---
Meeting notes
Meeting cadence
-1
View File
@@ -6,4 +6,3 @@ Status: Active
Przechodzę całkowicie na tworzenie notatek w Tolaria, mam nadzieję, że będzie to jakoś działało i będzie miało sens.
/
-6
View File
@@ -1,6 +0,0 @@
name: DNB
lanes:
- todo
- doing
- done
- waiting
@@ -1,50 +0,0 @@
Decisions
Add public holiday (Squeeze Day) for Swedish workers in HR system.
Close ***** project and transition to operational support.
Lower Splunk logging level to reduce log volume.
Use NinjaRMM scripting to update Splunk config files on Windows servers.
Initiate approval process for Remote Desktop Manager global access.
Open questions
Clarify Swedish holidays and Squeeze Days in HR system.
Investigate firewall migration incidents and asymmetric routing problems.
Wait for Red Hat license renewal to complete risk assessment and patching.
Improve license monitoring and renewal notification process.
Agenda
Goal: Review project progress and operational status
Ewa updated the HR system to include the public holiday for Swedish workers, addressing the confusion about the upcoming days off.
Participants discussed the concept of "squeeze days" in Sweden, clarifying that these are days off between holidays and regular workdays, which are not common in Poland.
Ewa updated the HR system to include the public holiday for Swedish workers and planned to notify the Swedish team in their chat.
Project updates
Ewa announced that the engineering team completed the ***** project, and Kamil will send out more information to relevant people.
Ewa explained that the engineering team is starting new projects, including automating certificate replacement globally with Kamil leading, and working on scene logging agents.
Firewall migration
Participants discussed ongoing issues with undocumented firewall flows and unexpected failures during migration, noting that rollback is not an option due to end-of-life and non-renewal of licenses.
Ewa stated that the goal is to complete migration of all CGI firewalls, including OVH, AWS, and Hungary, to Palo Alto by the end of November, replacing Checkpoint firewalls.
Splunk logging
Leszek raised concerns about excessive Splunk logging obscuring problem analysis, and Jimmy suggested lowering the logging level and updating the config file across Windows servers.
Red Hat licensing and patching
Adrian explained that Red Hat license expiration is preventing patching of affected servers, and renewal is pending completion of Red Hat's risk assessment, with patching planned before production weekends.
Red Hat licensing
Adrian explained that the Red Hat license renewal process was delayed due to Red Hat's slow response to assessment questions, but he expects the contract to be renewed before production patching begins.
Red Hat vulnerabilities
Adrian stated that there are about 10 non-production Red Hat servers affected by the new vulnerability, but the risk is moderate and patching can wait within the allowed 90-day window.
License monitoring
Leszek asked about tools for monitoring license status, and Adrian clarified that notifications are typically received via DocuSign, but internal systems did not provide alerts for this renewal.
Follow-up tasks
Task Assigned to Due date Bucket
Add the public holiday for all Swedish workers in the HR system (Ewa)
-10
View File
@@ -6,13 +6,3 @@ Status: Active
type: Type
---
# DailyNote
---\
title: Daily Note - {{date}}\
date: {{datetime}}\
tags: []\
Status: Active\
type: DailyNote\
---\
\
{{cursor}}
-20
View File
@@ -1,20 +0,0 @@
---
name: my-suite-gather-web
description: Fetches sources from the web. Uses web_search when needed, then web_fetch for extraction.
user-invocable: false
metadata: {"openclaw":{"emoji":"🌐","requires":{"config":["tools.web.fetch.enabled"]}}}
---
# Gather Web
## When to use
- Użytkownik podał URL lub trzeba znaleźć źródła w WWW.
## Steps
1) Jeśli jest URL → `web_fetch(url=..., extractMode="markdown")`
2) Jeśli brak URL → `web_search(query=..., count=3)` → wybierz 13 wyniki → `web_fetch(...)`
## Artifacts
Zapisz do:
- `{baseDir}/runs/<runId>/sources.md` (linki + krótkie ekstrakty)
- `{baseDir}/runs/<runId>/inputs.json` (metadane wejścia)
-33
View File
@@ -1,33 +0,0 @@
---
name: my-suite-orchestrator
description: Orchestrates the suite: routes to sub-skills, enforces guardrails, and produces auditable outputs.
user-invocable: true
metadata: {"openclaw":{"emoji":"🧭","always":true}}
---
# My Suite — Orchestrator
## Responsibility (single)
Zarządzaj wykonaniem zadania: wybierz właściwy sub-skill, utrzymaj porządek artefaktów i guardrails.
## Routing rules (deterministic)
- Jeśli źródło to URL / WWW → użyj **my-suite-gather-web**
- Jeśli źródło to plik/ścieżka → użyj **my-suite-gather-files**
- Jeśli trzeba przetworzyć/oczyścić dane → użyj **my-suite-transform**
- Jeśli trzeba złożyć wynik w raport → użyj **my-suite-report**
## Global guardrails (MUST)
- Preferuj narzędzia “read-only” i web tools (web_fetch/web_search) nad exec.
- `exec` tylko gdy:
1) to konieczne,
2) pasuje do allowlisty z my-suite-transform,
3) dotyczy wyłącznie plików w `{baseDir}/runs/<runId>/`.
- Artefakty zapisuj w `{baseDir}/runs/<runId>/...`
- Jeśli brakuje danych → max 3 pytania doprecyzowujące, potem stop.
## Output contract
Zawsze zwróć:
- TL;DR
- Co było wejściem
- Co powstało (artefakty i ścieżki)
- Następne kroki
-18
View File
@@ -1,18 +0,0 @@
---
name: my-suite-quickfetch
description: Slash-safe quick fetch: bypass model and run web_fetch directly on provided URL.
user-invocable: true
command-dispatch: tool
command-tool: web_fetch
command-arg-mode: raw
metadata: {"openclaw":{"emoji":"⚡","requires":{"config":["tools.web.fetch.enabled"]}}}
---
# QuickFetch (slash)
Usage:
- `/my-suite-quickfetch https://example.com`
Notes:
- This bypasses the model and dispatches to web_fetch.
- Provide a single URL as the raw args string.
-24
View File
@@ -1,24 +0,0 @@
---
name: my-suite-report
description: Produces the final report.md from gathered/transformed artifacts. No exec.
user-invocable: false
metadata: {"openclaw":{"emoji":"📝","always":true}}
---
# Report
## Inputs
- `{baseDir}/runs/<runId>/sources.md` i/lub `input.txt`
- `{baseDir}/runs/<runId>/result.raw` (jeśli istnieje)
- `transform.log` (opcjonalnie)
## Output
Zapisz:
- `{baseDir}/runs/<runId>/report.md`
Format report.md:
- TL;DR
- Evidence (źródła, linki, fragmenty)
- Steps taken (bez sekretów)
- Artifacts (ścieżki)
- Next actions (max 5)
-40
View File
@@ -1,40 +0,0 @@
---
name: my-suite-transform
description: Deterministic transformations with a strict command allowlist (exec is optional and constrained).
user-invocable: false
metadata: {"openclaw":{"emoji":"🧪","requires":{"config":["group:runtime"],"bins":["jq"]}}}
---
# Transform (Allowlisted exec)
## Golden rule
Preferuj transformacje bez `exec`. Jeśli `exec` jest potrzebny → tylko allowlista poniżej.
## Command allowlist (STRICT)
Dozwolone są WYŁĄCZNIE te komendy (dokładne wzorce):
1) `jq --version`
2) `jq -c . <INPUT >OUTPUT`
3) `jq -r . <INPUT >OUTPUT`
4) `head -n <N> <INPUT`
5) `tail -n <N> <INPUT`
6) `wc -l <INPUT`
7) `grep -n "<literal>" <INPUT`
8) `sed -n '<start>,<end>p' <INPUT`
### Constraints (MUST)
- `<INPUT>` i `<OUTPUT>` MUSZĄ być ścieżkami pod `{baseDir}/runs/<runId>/`
- `<N>` to liczba 1..500
- `"<literal>"` nie może zawierać znaków: `; | & $ \` ( ) { }`
- Zakaz: `rm`, `mv`, `cp` poza run, `curl`, `wget`, `ssh`, `sudo`, `chmod`, `chown`, `dd`, `mkfs`, `> /dev/*` itd.
## Execution steps
1) Waliduj, czy polecenie pasuje do allowlisty i constraintów.
2) Jeśli nie pasuje → przerwij i zaproponuj alternatywę bez exec.
3) Jeśli pasuje → uruchom `exec` tylko na plikach w katalogu run.
4) Wynik zapisz do:
- `{baseDir}/runs/<runId>/transform.log`
- `{baseDir}/runs/<runId>/<output files>`
## Why this exists
Zapobiega command injection i ogranicza skutki błędów do sandboxowego katalogu run.
-9
View File
@@ -1,9 +0,0 @@
---
title: Daily Note - {{date}}
date: {{datetime}}
tags: []
Status: Active
type: DailyNote
---
{{cursor}}