Monitor Sandbox Activity and Debug Issues
Prerequisites
- A running NemoClaw sandbox.
- The OpenShell CLI on your
PATH.
Use the NemoClaw status, logs, and TUI tools together to inspect sandbox health, trace agent behavior, and diagnose problems.
Check Sandbox Health
Run the status command to view the sandbox state, gateway health, and active inference configuration:
$ nemoclaw <name> status
For local Ollama and local vLLM routes, nemoclaw <name> status also probes the host-side health endpoint directly.
This catches a stopped local backend before you retry inference.local from inside the sandbox.
Key fields in the output include the following:
- Sandbox details, which show the configured model, provider, GPU mode, and applied policy presets.
- Gateway and process health, which show whether NemoClaw can still reach the OpenShell gateway and whether the in-sandbox agent process is running.
- Inference health for local Ollama and local vLLM, which shows
healthyorunreachabletogether with the probed local URL. - NIM status, which shows whether a NIM container is running and healthy when that path is in use.
Run nemoclaw <name> status on the host to check sandbox state.
Use openshell sandbox list for the underlying sandbox details.
View Blueprint and Sandbox Logs
Stream the most recent log output from the blueprint runner and sandbox:
$ nemoclaw <name> logs
To follow the log output in real time:
$ nemoclaw <name> logs --follow
Monitor Network Activity in the TUI
Open the OpenShell terminal UI for a live view of sandbox network activity and egress requests:
$ openshell term
For a remote sandbox, SSH to the instance and run openshell term there.
The TUI shows the following information:
- Active network connections from the sandbox.
- Blocked egress requests awaiting operator approval.
- Inference routing status.
Refer to Approve or Deny Agent Network Requests (use the nemoclaw-user-manage-policy skill) for details on handling blocked requests.
Test Inference
Run a test inference request to verify that the provider is responding:
$ nemoclaw my-assistant connect
$ openclaw agent --agent main -m "Test inference" --session-id debug
If the request fails, check the following:
- Run
nemoclaw <name> statusto confirm the active provider and endpoint. For local Ollama and local vLLM, check theInferenceline first. If it showsunreachable, restart the local backend before retrying from inside the sandbox. - Run
nemoclaw <name> logs --followto view error messages from the blueprint runner. - Verify that the inference endpoint is reachable from the host.
Related Skills
nemoclaw-user-reference— Troubleshooting (use thenemoclaw-user-referenceskill) for common issues and resolution stepsnemoclaw-user-manage-policy— Approve or Deny Agent Network Requests (use thenemoclaw-user-manage-policyskill) for the operator approval flownemoclaw-user-configure-inference— Switch Inference Providers (use thenemoclaw-user-configure-inferenceskill) to change the active provider