For AI agents: a documentation index is available at the root level at /llms.txt and /llms-full.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
User Guide
User Guide
    • Home
      • Overview
      • Architecture Overview
      • Ecosystem
      • Release Notes
      • Prerequisites
      • Quickstart with Hermes
      • Inference Options
      • Use Local Inference
      • Switch Inference Providers
      • Manage Sandbox Lifecycle
      • Runtime Controls
      • Set Up Messaging Channels
      • Workspace Files
      • Backup and Restore
      • Install Hermes Plugins
      • Approve or Deny Network Requests
      • Customize the Network Policy
      • Integration Policy Examples
      • Monitor Sandbox Activity
      • Security Best Practices
      • Credential Storage
      • Architecture Details
      • Commands
      • Which CLI to Use
      • Network Policies
      • Troubleshooting
      • Agent Skills
      • Report Vulnerabilities
      • License
      • Discord
NVIDIANVIDIA
Developer-friendly docs for your API
Privacy Policy | Your Privacy Choices | Terms of Service | Accessibility | Corporate Policies | Product Security | Contact

Copyright © 2026, NVIDIA Corporation.

LogoLogoNemoClaw
On this page
  • Prerequisites
  • Check Sandbox Health
  • View Blueprint and Sandbox Logs
  • Monitor Network Activity in the TUI
  • Test Inference
  • Related Topics
Monitoring

Monitor Sandbox Activity and Debug Issues

||View as Markdown|
Previous

Common NemoClaw Integration Policy Examples

Next

NemoClaw Security Best Practices: Controls, Risks, and Posture Profiles

Use the NemoClaw status, logs, and TUI tools together to inspect sandbox health, trace agent behavior, and diagnose problems.

Prerequisites

  • A running NemoClaw sandbox.
  • The OpenShell CLI on your PATH.

Check Sandbox Health

Run the status command to view the sandbox state, gateway health, and active inference configuration:

$nemoclaw <name> status

For local Ollama and local vLLM routes, nemoclaw <name> status also probes the host-side health endpoint directly.

This catches a stopped local backend before you retry inference.local from inside the sandbox.

Key fields in the output include the following:

  • Sandbox details, which show the configured model, provider, GPU mode, and applied policy presets.
  • Gateway and process health, which show whether NemoClaw can still reach the OpenShell gateway and whether the in-sandbox agent process is running.
  • Inference health for local Ollama and local vLLM, which shows healthy or unreachable together with the probed local URL.
  • NIM status, which shows whether a NIM container is running and healthy when that path is in use.

Run nemoclaw <name> status on the host to check sandbox state.

Use openshell sandbox list for the underlying sandbox details.

View Blueprint and Sandbox Logs

Stream the most recent log output from the blueprint runner and sandbox:

$nemoclaw <name> logs

To follow the log output in real time:

$nemoclaw <name> logs --follow

Monitor Network Activity in the TUI

Open the OpenShell terminal UI for a live view of sandbox network activity and egress requests:

$openshell term

For a remote sandbox, SSH to the instance and run openshell term there.

The TUI shows the following information:

  • Active network connections from the sandbox.
  • Blocked egress requests awaiting operator approval.
  • Inference routing status.

Refer to Approve or Deny Agent Network Requests for details on handling blocked requests.

Test Inference

Run a test inference request to verify that the provider is responding:

$nemoclaw my-assistant connect
$openclaw agent --agent main -m "Test inference" --session-id debug

If the request fails, check the following:

  1. Run nemoclaw <name> status to confirm the active provider and endpoint. For local Ollama and local vLLM, check the Inference line first. If it shows unreachable, restart the local backend before retrying from inside the sandbox.
  2. Run nemoclaw <name> logs --follow to view error messages from the blueprint runner.
  3. Verify that the inference endpoint is reachable from the host.

Related Topics

  • Troubleshooting for common issues and resolution steps.
  • Commands for the full CLI reference.
  • Approve or Deny Agent Network Requests for the operator approval flow.
  • Switch Inference Providers to change the active provider.