Abstract: In one aspect, a computerized method includes the step of building an information technology operations analytics (ITOA) stack. The method includes the step of ingesting and storing data and metadata at rest. The method includes the step of storing a set of metadata of the ingested data in an object store, a virtual machine or a container. The method includes the step of maintaining a set of primary data of the ingested data with an object store. The method includes the step of packaging one or more data and metadata units of the set of primary data as objects in an object store. The method includes the step of writing over objects at select intervals. The method includes the step of breaking objects into chunks to reduce overwrites. The method includes the step of laying the data and metadata objects out as partitioned by time and user specified partition attributes. The method includes the step of creating one or more application boundaries at the time of ingesting.

Abstract: In one aspect, a computerized method includes the step of building an information technology operations analytics (ITOA) stack. The method includes the step of ingesting and storing data at rest. The method includes the step of storing a set of metadata of the ingested data in a virtual machine or a container. The method includes the step of maintaining a set of primary data of the ingested data with an object store. The method includes the step of packaging one or more data units of the set of primary data. The method includes the step of writing over objects at select intervals. The method includes the step of breaking objects into chunks to reduce overwrites. The method includes the step of laying the data out as partitioned by time. The method includes the step of creating one or more application boundaries at the time of ingesting.

Abstract: An illustrative embodiment disclosed herein is an apparatus including a processor having programmed instructions that identify a bucket identifier corresponding to a bucket. The bucket identifier includes a prefix. The processor has programmed instructions that determine that the prefix matches a predetermined prefix, assign an expiry duration to the bucket, and, after the expiry duration, delete the bucket identifier.

Abstract: Synchronization techniques for computing systems that interface with external service providers. A method for accessing status and other attributes of an external service provider commences upon identifying an external service such as a firewall appliance or backup repository that provides computing-related functions to computing entities of the computing system. One or more access mechanisms such as an application programming interface is exposed to the external service. The external service is registered with the computing system to use the access mechanism. When the external service detects a change of its state, the external service can communicate that change to the computing system through a “push” operation. The computing system processes the “pushed” data from the external service by verifying the status of the registration and authorization permissions, and then modifies one or more entity attributes of the computing resource entity.

Abstract: In one aspect, a computerized method includes the step of building an information technology operations analytics (ITOA) stack. The method includes the step of ingesting and storing data at rest. The method includes the step of storing a set of metadata of the ingested data in a virtual machine or a container. The method includes the step of maintaining a set of primary data of the ingested data with an object store. The method includes the step of packaging one or more data units of the set of primary data. The method includes the step of writing over objects at select intervals. The method includes the step of breaking objects into chunks to reduce overwrites. The method includes the step of laying the data out as partitioned by time. The method includes the step of creating one or more application boundaries at the time of ingesting.

Abstract: An illustrative embodiment disclosed herein is an apparatus including a processor having programmed instructions that identify a bucket identifier corresponding to a bucket. The bucket identifier includes a prefix. The processor has programmed instructions that determine that the prefix matches a predetermined prefix, assign an expiry duration to the bucket, and, after the expiry duration, delete the bucket identifier.

Abstract: Systems for computer security. A proxy service implements methods for substituting callback uniform resource locators (URLs) when using an OAuth protocol exchange to authenticate an application. A proxy service is established at a first uniform resource locator to carry out communications between one or more identity access management servers and a plurality of application hosting sites. At least one of the plurality of application hosting sites has a second uniform resource locator that is different from the first uniform resource locator. An identity access management server will register the application and the first uniform resource locator. From any hosting site, the application is invoked, upon which invocation, the application carries out at least a portion of the OAuth protocol exchange with the IAM. The proxy service at the first uniform resource locator receives an authentication message from the IAM and then redirects the authentication message to the application hosting site.

Abstract: A method and apparatus for data driven and cluster specific version/update control. The apparatus includes an automated multi-clusters management apparatus that interfaces with a plurality of remote clusters to provide data driven version/update control on a cluster by cluster basis. Generally, operation includes collection/identification of cluster specific data pertaining to software, hardware, and cluster requirements. The cluster specific data is later compared/analyzed against multi-cluster data pertaining to software releases, hardware characteristics, and known bugs/issues for each. The results of the comparison/analysis can then be ranked according to various metrics to different possible solutions and to differentiate the less desirable results from the more desirable results. Thus, the automated multi-cluster management apparatus provides for selection of versions/updates that is dependent on the cluster specific data.

Abstract: Systems for rule-based data protection of virtualized computing entities. A method embodiment commences upon receiving specification parameters that correspond to one or more data protection schemes or data protection configurations such as schemes for making backups or snapshots. Based on the specification parameters and the data protection configurations, one or more resource entities associated with the data protection configurations are identified. Each of the resource entities are accessed and one or more applicable data protection administration rules that correspond to the respective resource entities are applied. The resource entities might be organized hierarchically. Determination of which data protection administration rules are applicable to the resource entities is based on the type of resource entity being considered. The combination of the resource entity type and respective applicable rules is used to generate entity-specific data protection commands.

Abstract: Computing cluster system management. Embodiments implement fine-grained rule-based approaches to error recovery. A service dispatches tasks to components of the computing cluster. At the time of task dispatching, entries are made into a write-ahead log. The write-ahead log entries serve for recording task and component attributes. A monitor detects a failure event raised by one or more of the components of the computing cluster. Responses to the failure event include determining a set of conditions that are present in the computing cluster at the time of the detection, and then using the failure event and the determined conditions in combination with a set of fine-grained failure processing rules to determine one or more recovery actions to take. Recovery actions include redistributing the failed task to a different node or to different service. Certain conditions and rules initiate actions that rollback the state of a component to a previous success point.

Abstract: A method includes receiving, by a host server on a public cloud including one or more physical data centers associated with one or more logical zones, a pairing request by a client device associated with a private cloud, allocating, by the host server, access to resources on the one or more physical data centers to the client device, and pairing, by the host server, the private cloud to the public cloud based on receiving an identity provider token from an identity provider.

Abstract: Systems for achieving and maintaining a specified state of a computing resource in a distributed computing environment. A method embodiment commences upon receiving one or more specification parameters that describe a desired target state associated with a particular computing resource and/or of a particular computing environment. The specification parameters that characterize the desired target state of a resource are recorded in a target state data structure. Periodically, an agent issues a state progression query to determine if the computing resource has reached its desired target state. The query is then processed by collecting state parameters that describe the then-current state of the computing resource or environment. The target state data structure is accessed to identify one or more state differences between the desired target state and the then-current state of the particular computing resource and/or its particular computing environment.

Abstract: Computer-aided computer system configuration techniques for adding new computing resources to an existing set of computing resources. A method embodiment commences upon identifying an existing computing system having a first set of configuration parameters. A second computing system having a second set of configuration parameters is deployed. A user interface is provided to accept user input comprising a location and protocol to access the existing computing system. Syntactical and semantic differences between the configuration parameters of the existing computing system and those of the newly added set are identified. The identified differences are analyzed to generate a parameter map that relates the existing set of configuration parameters to the second set of configuration parameters and vice-versa. Relationships that are codified in the parameter map are validated through user interactions.

Abstract: An illustrative embodiment disclosed herein is an object store with distributed caching including a distributed cache cluster including a first cache on a first node device and a second cache on a second node device. The object store with distributed caching further includes a gateway server communicatively coupled to the distributed cache cluster. The gateway server receives a request to store an object from a client device, determines whether the object satisfies an object policy, determines whether the request indicates that the object is to be split up into a plurality of shards, and stores a first shard of the plurality of shards in the first cache and a second shard of the plurality of shards in the second cache.

Abstract: Entries in individual portions of a network map serve to establish inter-cluster routes that are formed from routing data structures at individual clusters, which routing data structures store connection parameters pertaining to access point nodes in a multi-cluster computing environment. Upon receiving a resource management request at one of the access points, the request parameters are used in combination with the network map to identify at least one target access point having a virtual machine for responding to the resource management request. The resource management request is routed to a next hop access point node on route(s) to target access points. If the next hop access point node is not the node to respond to the resource management request, then processing at the next hop node serves to route the resource management request to a further next hop access point node on a route to the target access point.

Abstract: An illustrative embodiment disclosed herein is an object store with distributed caching including a distributed cache cluster including a first cache on a first node device and a second cache on a second node device. The object store with distributed caching further includes a gateway server communicatively coupled to the distributed cache cluster. The gateway server receives a request to store an object from a client device, determines whether the object satisfies an object policy, determines whether the request indicates that the object is to be split up into a plurality of shards, and stores a first shard of the plurality of shards in the first cache and a second shard of the plurality of shards in the second cache.

Abstract: A method includes receiving, by a host server on a public cloud including one or more physical data centers associated with one or more logical zones, a pairing request by a client device associated with a private cloud, allocating, by the host server, access to resources on the one or more physical data centers to the client device, and pairing, by the host server, the private cloud to the public cloud based on receiving an identity provider token from an identity provider.

Abstract: Systems, methods and computer program products for forecast data storage. Embodiments implement fine-grained forecast data management. A cloud-based object storage system capable of storing multiple versions of an object in a container is identified. A forecast data set covering a relatively longer time period (e.g., years) is partitioned into fine-grained forecast data items corresponding to relatively shorter forecast data time periods (e.g., months, days). Some of the fine-grained forecast data items corresponding to the relatively shorter forecast data time periods are stored into a first portion of metadata of the container rather than storing the forecast data items into the object itself. Updated variations of the fine-grained forecast data items and/or new forecast data items are stored in versions of the object. A second portion of metadata of the container is used to describe a version mapping between the forecast data time periods and corresponding object versions in the container.