Required information
Tracecat version
Get the version from the running API:-
Docker Compose: run
docker compose images api ui, or checkTRACECAT__IMAGE_TAGin your.envfile. -
Kubernetes: run the command below.
image.taganduiImage.tagoverride the chart’sappVersion, so check the running images rather than theAPP VERSIONcolumn inhelm list. -
AWS ECS Fargate: check the
tracecat_image_tagTerraform variable.
Helm chart version
If you deploy with Helm, send the chart version from theCHART column:
tracecat-0.6.0 means chart version 0.6.0. Also tell us which values you changed from the defaults, with secrets removed.
Latest release
Check the changelog for a fix to your issue, then update to the latest Tracecat image, Helm chart, or Docker Compose files:- Docker Compose: follow Updating Tracecat.
- Kubernetes: follow Upgrade the Helm chart.
- AWS ECS Fargate: follow Updating Tracecat.
Details that speed up debugging
- Exact error: the full message and where it appeared (UI, workflow run event, agent chat, API response, or service log). Add a screenshot for UI issues.
- Time: when the issue happened, with timezone, so we can match it to logs.
- Reproduction steps: the smallest workflow, agent preset, or API call that reproduces the issue. Export the workflow definition as YAML and remove secrets.
- Regression: whether this worked on an earlier Tracecat version, and which one.
- Recent changes: upgrades, environment variable or Helm value changes, infrastructure, proxy, or network changes made before the issue started.
- Scope: whether the issue affects every workflow, user, and workspace, or only some.
-
Service health: output of
docker compose psorkubectl get pods -n tracecat, including restart counts. -
Logs: logs from
api,worker,executor,agent-worker, andagent-executoraround the time of the issue. For UI issues, add errors from the browser console. -
Deployment setup: your execution backend (
TRACECAT__EXECUTOR_BACKEND), Temporal (bundled, self-hosted, or Temporal Cloud), PostgreSQL (bundled or external), authentication type, and whether you run behind a reverse proxy, a custom CA, or in an air-gapped environment.
.env file or TRACECAT__DB_ENCRYPTION_KEY.