BLUE / Overview
Checking systems
BU
BLUE user
BLUE WORKSPACE

AI triage

Open source LLMQWEN3.8 Flash Next

Start a triage

Main ticket only
JiraPIMSConfluence
Total analyses
Completed
In progressQueue + active work
System statusCHECKINGWaiting for health signal

Recent analyses

BLUE

How BLUE works

The Hub coordinates the work. The model reviews the evidence. You decide what to verify next.

REQUEST → EVIDENCE → REVIEW → RESULT

One route, ready for review at every step.

  1. 01 · REQUEST

    A request starts

    Portal, CLI, or an approved tagged workflow.

  2. 02 · AI HUB

    BLUE sets the route

    Identity, scope, queue, and a recorded path.

  3. 03 · EVIDENCE

    Evidence is prepared

    Bounded source facts and qualified local receipts.

  4. 04 · OPEN SOURCE LLM

    The model reviews

    Findings, hypotheses, gaps, and the next useful check.

  5. 05 · RESULT

    A result is checked

    Suggestion, evidence boundary, gaps, and history.

BLUE controls the route It keeps the request, evidence scope, audit records, and approval boundary together. The model reviews prepared evidence; it does not directly run tools or publish comments.

A bounded follow-up may add a new local receipt to the next review. Results remain suggestions for engineering verification, not root-cause verdicts.

Ticket scopeTriage normally stays on the requested main record. Linked tickets, video, and Ticket attachments over 10 MB are left out; native files stay on the workstation.

Key questions

What is the AI Hub responsible for?It coordinates the work before and after a model review.

AI Hub turns a request into a tracked workflow: it keeps the request identity, chooses the evidence boundary, sequences the work, and records what happened. It prepares the conditions for review; it does not claim the engineering root cause.

What does the LLM do here?It interprets prepared evidence and proposes the next useful check.

The open source LLM reads the prepared evidence bundle and returns observed facts, hypotheses, gaps, and a suggested next step. It does not own request permissions, browser access, or the comment-writing path.

How can one analysis have multiple passes?Each response can become a focused next question or a checked result.

BLUE can use the previous result to prepare another bounded review. When a qualified local worker produces a source-bound receipt, that receipt may become evidence for a recorded follow-up rather than an untracked autonomous action.

How are suggestions kept tied to evidence?Scope, references, output checks, and visible gaps limit avoidable error.

The workflow passes bounded source material to the model, checks the response shape and references, and keeps missing evidence visible. These controls reduce avoidable mistakes, but engineers still validate the direction with tests and additional evidence.

What does BLUE make easier for engineers?One traceable route shared by Portal, CLI, and analysis history.

BLUE gives a team a repeatable way to prepare a request, review scoped evidence, keep uncertainty visible, and return to the same history record when work continues.

Analysis History

New Triage

Enter a Jira, PIMS or Confluence reference.

Main record only. Linked tickets, videos and attachments over 10 MB are skipped.

What happens next

  1. Collect source evidence
  2. Analyze with the open source LLM
  3. Review the suggestion in History
Each Portal submission creates a separate analysis record and does not post comments.

Log Analysis

Use the Portal for bounded text logs. Use the CLI for native Windows files.

Drop a text log here

or

Portal text only · ≤100 MiB · native files stay on the workstation
EVIDENCE POLICY

Controlled staging

The Portal stores the upload temporarily to hash it and extract bounded excerpts. The model receives excerpts with source SHA-256 and line ranges; raw staging is not sent to the model.

100 MiBhard upload cap
Hash-boundsource + excerpt integrity
TTL cleanupstaging is temporary
SUPPORTED FORMATS

Choose the right analysis path

Text can be sent through the Portal. Native Windows files stay local and use the CLI only when a qualified parser is available.

DMP / BSOD dumpCLI + qualified native worker · not a Portal uploadAdapter-dependent
SleepStudyCLI native parser for XML/HTML summariesAdapter-dependent
ETL / WPACLI + qualified native parser · not a Portal uploadAdapter-dependent
EVTXCLI native event export and bounded reviewAdapter-dependent
USB traceCLI + qualified trace parserAdapter-dependent
HLK packageHLK package (HLKP/HLKX) uses the CLI local analyzer; never a Portal uploadConfigured worker · case qualification
CollectParseCheck coverageAnalyzeReview gapsFinalize

The local processor makes a hash-bound evidence bundle. BLUE controls scope, sends bounded evidence to the model, requests another pass only when the workflow calls for it, and records gaps before a result is shown.

BLUE

Suggest a capability

Tell us what would make your analysis workflow more useful. Your signed-in identity is attached automatically.

FEATURE REQUEST

What should BLUE do next?

Example: 0.25 = 15 minutes.

YOUR REQUESTS

Previously submitted

CLI setup & help

Submit logs and triage requests from your workstation.

Install BLUE CLI

Run one command in your terminal. BLUE installs for your user, then asks for your access code privately.

curl -fsS https://blue-hostxxxx.tail4c6b73.ts.net/install.sh | bash && export PATH="$HOME/.local/bin:$PATH" && hash -r

Requires Python 3.10+ and curl. No sudo, pip or manual package download. Your access code is never part of the command.

Use it nowUse blue immediately after installing; no new terminal is needed. To check the connection, run blue doctor.
Your accountThe access code identifies your BLUE account. Each workstation gets its own credential; existing permissions and code expiry still apply.

Inspect installer · Manual download

QUICK REFERENCE

When to use which surface

PortalReview history, evidence gaps and live job events.
CLISubmit repeatable triage from a trusted workstation.
Log uploadStage text evidence locally with SHA-256 coverage.
BSOD / nativeUses the locally configured BLUE Log Analyzer worker; qualification is checked case by case.
BLUE is a dedicated engineering workspace identity. It is not an official Dell product or brand mark.