Agent skill

brendangregg-use-tsa

Methodical performance troubleshooting and root-cause analysis with Brendan Gregg's USE and TSA methods, plus evidence-backed RCA and postmortem reports.

Nick44,086★ · +407/wk · 1 repos on radarProfile →
claude-codecodexcursorMIT
Install
npx skills add sickn33/agentic-awesome-skills --skill brendangregg-use-tsa --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 1
SKILL.md size: 11 KB
Bundled scripts: none
Declared author: thecsdoctor
Path: skills/brendangregg-use-tsa/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 44,414 · +328 this week
Language: Python
Read our review of the source →

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# Brendan Gregg USE+TSA Performance Analysis ## Overview A fixed, evidence-first procedure for system performance debugging, root-cause analysis (RCA), and incident reporting, distilled from Brendan Gregg's published methodologies. Instead of running whichever commands happen to be familiar, the agent poses questions first and then finds metrics to answer them: the USE Method (Utilization, Saturation, Errors) sweeps every resource, the TSA Method (Thread State Analysis) decomposes thread time, and off-CPU analysis plus flame graphs drill into what the sweeps find. Every investigation ends in a structured triage note, RCA report, or postmortem where each claim traces to a command and its output. This skill adapts material from the community repository [thecsdoctor/brendangregg-use-tsa-skill](https://github.com/thecsdoctor/brendangregg-use-tsa-skill) (full checklists, reference library, and report templates live there). ## When to Use This Skill - Use when a server, VM, or container is "slow" and the cause is unknown - Use when latency or throughput regressed after a deploy, config change, or load shift - Use when CPU, memory, disk, or network metrics look abnormal and need interpret

What's inside
Steps it walks through
  1. Overview
  2. When to Use This Skill
  3. How It Works
  4. Step 0: Problem Statement
  5. Step 1: 60-Second Triage (Linux)
  6. Step 2: USE Sweep (resource-oriented)
  7. Step 3: TSA Sweep (thread-oriented)
  8. Step 4: Drill Down
  9. Step 5: Confirm Root Cause
  10. Step 6: Fix and Verify
  11. Step 7: Report
  12. Examples
  13. Example 1: "This server feels slow"
  14. Example 2: Post-deploy latency regression
Commands it runs
uptime                 # load trend (includes uninterruptible I/O on Linux)
dmesg | tail           # kernel errors: oom-killer, SYN flooding, hardware
vmstat 1               # r > CPU count = CPU saturation; si/so = swapping; wa = disk
mpstat -P ALL 1        # per-CPU imbalance (single hot CPU = single-threaded app)
pidstat 1              # per-process CPU over time
iostat -xz 1           # await (app-suffered latency), avgqu-sz, %util
free -m                # memory; buffers/cache near zero hurts
sar -n DEV 1           # NIC throughput vs link limit
sar -n TCP,ETCP 1      # active/passive connections, retransmits
top                    # spot variable load
More from agentic-awesome-skills
All skills →
About this skill
What does the brendangregg-use-tsa skill do?

Methodical performance troubleshooting and root-cause analysis with Brendan Gregg's USE and TSA methods, plus evidence-backed RCA and postmortem reports.

How do I install it?

Run `npx skills add sickn33/agentic-awesome-skills --skill brendangregg-use-tsa --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From sickn33/agentic-awesome-skills, a repository with 44,414 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going