Abstract: A method can include storing information about the business service in one or more template type layers; storing information about an instance of the business service in one or more instance type layers; wherein the template type layers include one or more checkpoints that reference information stored in a content addressable store that defines an expected structure of the business service, wherein at least one checkpoint of the template type layers includes a timestamp and a hash value associated with an entry in the content addressable store; and wherein the instance type layers include one or more checkpoints that reference information stored in the content addressable store that defines attributes of the instance of the business service, wherein at least one checkpoint of the instance type layers includes a timestamp and a hash value associated with an entry in the content addressable store.

Abstract: Disclosed are methods, apparatuses and systems for collecting transactional and dimensional data. One implementation includes a configuration management database, a first data collection agent operating on a first monitored server to collect metadata associated with the first monitored server from the configuration management database using the first data collection agent, collect metric data from the first monitored server regarding operation of the first monitored server, wherein the metric data includes at least one metric collected from at least one application executing on the first monitored server; and assemble the collected metric data and at least part of the collected metadata into a packet for transmission from the first monitored server to a message bus; and a distributed database configured to receive the packet from the message bus and to store the collected metric data and metadata included in the packet.

Abstract: A system may include a database containing representations of configuration items associated with a managed network that is managed by a remote network management platform. The system may also contain a server device that may be configured to determine a set of duplicate representations of a particular configuration item of the configuration items. The configuration items may relate to computing devices and software applications disposed within the managed network. The server device may be further configured to generate a master representation from the set of duplicate configuration items. The server device may replace, in the database, the set of duplicate representations with the master representation.

Abstract: Disclosed herein are various systems, methods, and apparatuses for providing a system independent Configuration Management Database identification system. In an implementation, a dynamic identification system correlates records of an originating system with records of an Authoritative Configuration Management Database (CMDB) including a set of one or more identifying rules that define a minimum amount of information in order to generate an identifying signature that serves as a common reference between a record of the originating system with a matching Configuration Item (CI) record of the ACMDB, receiving, from the originating system, information to generate an identifying signature, determining that the generated first identifying signature matches a stored identifying signature, and correlating the first record of the originating system corresponding with the generated first identifying signature with the one of the CI records of the ACMDB corresponding with the matching one of the identifying signatures.

Abstract: Disclosed are methods, apparatuses and systems for collecting transactional and dimensional data. One implementation includes a configuration management database, a first data collection agent operating on a first monitored server to collect metadata associated with the first monitored server from the configuration management database using the first data collection agent, collect metric data from the first monitored server regarding operation of the first monitored server, wherein the metric data includes at least one metric collected from at least one application executing on the first monitored server; and assemble the collected metric data and at least part of the collected metadata into a packet for transmission from the first monitored server to a message bus; and a distributed database configured to receive the packet from the message bus and to store the collected metric data and metadata included in the packet.

Abstract: An anomaly detection module may include a time-series analyzer that classifies current time-series data into at least one of a plurality of classifications based upon historical data and may construct a statistical model representative of the current time-series data based upon the at least one of the plurality of classifications. An anomaly detector monitors a stream of the current time-series data and identifies statistical outliers of the stream of the current time-series data, based upon the statistical model and may determine an anomalous score for the statistical outliers by tracking a history of the statistical outliers; wherein the anomalous score comprises a representation of a magnitude of deviation between the current time-series data and the statistical model over multiple measurements of the current time-series data, over a particular time interval, or both.

Abstract: A method may include receiving a first record associated with a first configuration item from a first data source and a second record associated with a second configuration item from a second data source; identifying a relationship between the first configuration item and the second configuration item based on the first record and the second record; identifying a relationship rule governing the relationship between the first configuration item and the second configuration item; determining that the relationship between the first configuration item and the second configuration item is inconsistent with the relationship rule; remediating the relationship between the first configuration item and the second configuration item such that the relationship is consistent with the relationship rule; and allowing the first record and the second record to be stored in the configuration management database in response to remediating the relationship.

Abstract: A remote network management platform may include a database containing representations of configuration items associated with a managed network that is managed by the remote network management platform. The remote network management platform may further include a server device. The server device may be configured to obtain a plurality of preferred relationships for a particular configuration item class. The server device may be further configured to store, in the database, the plurality of preferred relationships.

Abstract: Systems and methods for the identification and reconciliation of network resource information are herein disclosed. In an implementation, a system includes instructions stored in memory for processing a request received from a data source to update a record of a network resource by receiving data relating to an attribute of a network resource of a computer network from a first data source, wherein the network resource is associated with a configuration item of a configuration management database, the configuration item including data relating to the attribute from a second source; determining that the first data source is authoritative for the attribute based on a priority of the first data source, a priority of the second data source, and a staleness period of the second data source; and processing the request by updating the attribute based on the data.

Abstract: An apparatus for grouping alerts generated by automated monitoring of at least an operating condition of a machine, represented as a configuration item in a configuration management database, in a computer network. A first event pattern is identified based on configuration items associated with an alert avalanche identified from received historical alert data stored in memory. A second event pattern is identified based on co-occurrences of configuration item pairs in the historical alert data and on at least one conditional probability parameter. At least one alert group is determined by comparing at least one configuration item associated with a current alert to the plurality of configuration items of the first event pattern and of the second event pattern stored in memory. A graphical display region for displaying the alert group is generated.

Abstract: A method can include storing information about the business service in one or more template type layers; storing information about an instance of the business service in one or more instance type layers; wherein the template type layers include one or more checkpoints that reference information stored in a content addressable store that defines an expected structure of the business service, wherein at least one checkpoint of the template type layers includes a timestamp and a hash value associated with an entry in the content addressable store; and wherein the instance type layers include one or more checkpoints that reference information stored in the content addressable store that defines attributes of the instance of the business service, wherein at least one checkpoint of the instance type layers includes a timestamp and a hash value associated with an entry in the content addressable store.

Abstract: An apparatus for grouping alerts generated by automated monitoring of at least an operating condition of a machine, represented as a configuration item in a configuration management database, in a computer network. A first event pattern is identified based on configuration items associated with an alert avalanche identified from received historical alert data stored in memory. A second event pattern is identified based on co-occurrences of configuration item pairs in the historical alert data and on at least one conditional probability parameter. At least one alert group is determined by comparing at least one configuration item associated with a current alert to the plurality of configuration items of the first event pattern and of the second event pattern stored in memory. A graphical display region for displaying the alert group is generated.

Abstract: A remote network management platform may include a database containing representations of configuration items associated with a managed network that is managed by the remote network management platform. The remote network management platform may further include a server device. The server device may be configured to obtain a plurality of preferred relationships for a particular configuration item class. The server device may be further configured to store, in the database, the plurality of preferred relationships.

Abstract: A system may include a database containing representations of configuration items associated with a managed network that is managed by a remote network management platform. The system may also contain a server device that may be configured to determine a set of duplicate representations of a particular configuration item of the configuration items. The configuration items may relate to computing devices and software applications disposed within the managed network. The server device may be further configured to generate a master representation from the set of duplicate configuration items. The server device may replace, in the database, the set of duplicate representations with the master representation.

Abstract: Disclosed herein are various systems, methods, and apparatuses for providing a system independent Configuration Management Database identification system. In an implementation, a dynamic identification system correlates records of an originating system with records of an Authoritative Configuration Management Database (CMDB) including a set of one or more identifying rules that define a minimum amount of information in order to generate an identifying signature that serves as a common reference between a record of the originating system with a matching Configuration Item (CI) record of the ACMDB, receiving, from the originating system, information to generate an identifying signature, determining that the generated first identifying signature matches a stored identifying signature, and correlating the first record of the originating system corresponding with the generated first identifying signature with the one of the CI records of the ACMDB corresponding with the matching one of the identifying signatures.

Abstract: A method can include storing information about the business service in one or more template type layers; storing information about an instance of the business service in one or more instance type layers; wherein the template type layers include one or more checkpoints that reference information stored in a content addressable store that defines an expected structure of the business service, wherein at least one checkpoint of the template type layers includes a timestamp and a hash value associated with an entry in the content addressable store; and wherein the instance type layers include one or more checkpoints that reference information stored in the content addressable store that defines attributes of the instance of the business service, wherein at least one checkpoint of the instance type layers includes a timestamp and a hash value associated with an entry in the content addressable store.

Abstract: Systems and methods for the identification and reconciliation of network resource information are herein disclosed. In an implementation, a system includes instructions stored in memory for processing a request received from a data source to update a record of a network resource by receiving data relating to an attribute of a network resource of a computer network from a first data source, wherein the network resource is associated with a configuration item of a configuration management database, the configuration item including data relating to the attribute from a second source; determining that the first data source is authoritative for the attribute based on a priority of the first data source, a priority of the second data source, and a staleness period of the second data source; and processing the request by updating the attribute based on the data.

Abstract: A remote network management platform may include a database containing representations of configuration items associated with a managed network that is managed by the remote network management platform. The remote network management platform may further include a server device. The server device may be configured to obtain a plurality of preferred relationships for a particular configuration item class. The server device may be further configured to store, in the database, the plurality of preferred relationships.

Abstract: Disclosed herein are various systems, methods, and apparatuses for providing a system independent Configuration Management Database identification system. In an implementation, a dynamic identification system correlates records of an originating system with records of an Authoritative Configuration Management Database (CMDB) including a set of one or more identifying rules that define a minimum amount of information in order to generate an identifying signature that serves as a common reference between a record of the originating system with a matching Configuration Item (CI) record of the ACMDB, receiving, from the originating system, information to generate an identifying signature, determining that the generated first identifying signature matches a stored identifying signature, and correlating the first record of the originating system corresponding with the generated first identifying signature with the one of the CI records of the ACMDB corresponding with the matching one of the identifying signatures.

Abstract: Systems and methods for the identification and reconciliation of network resource information are herein disclosed. In an implementation, a system includes instructions stored in memory for processing a request received from a data source to update a record of a network resource by receiving data relating to an attribute of a network resource of a computer network from a first data source, wherein the network resource is associated with a configuration item of a configuration management database, the configuration item including data relating to the attribute from a second source; determining that the first data source is authoritative for the attribute based on a priority of the first data source, a priority of the second data source, and a staleness period of the second data source; and processing the request by updating the attribute based on the data.