Abstract: Systems and methods are described for improving data availability and/or resiliency of indexers of a data intake and query system. A data intake and query system can index large amounts of data using one or more indexers. An indexer can store a copy of the data that the indexer is assigned to process in the shared storage system, and a cluster master can track the storage of the data and the indexer assigned to process the data. In the event an indexer fails or is otherwise unable to index data that it has been assigned to index, the cluster master can assign one or more second indexers to process the data. The second indexer can download the data from the shared storage system.

Abstract: In one implementation, a method is disclosed comprising: identifying, by a device, a plurality of functions within a source code based on one or more programmatic annotations of each of the plurality of functions within the source code; monitoring, by the device, execution characteristics associated with each of the plurality of functions within the source code during execution; constructing, by the device, a function call graph from the plurality of functions wherein each particular function in the function call graph is annotated with corresponding execution characteristics; and partitioning, by the device and based on the function call graph and one or more deployment specifications, the plurality of functions within the source code into singularly executable function capsules that meet the one or more deployment specifications.

Abstract: Systems and methods are described for processing ingested data, detecting anomalies in the ingested data, and providing explanations of a possible cause of the detected anomalies as the data is being ingested. For example, a token or field in the ingested data may have an anomalous value. Tokens or fields from another portion of the ingested data can be extracted and analyzed to determine whether there is any correlation between the values of the extracted tokens or fields and the anomalous token or field having an anomalous value. If a correlation is detected, this information can be surfaced to a user.

Abstract: The present disclosure describes various optical systems with an optical connector. An optical system includes an integrated circuit and a connector. The integrated circuit includes a grating coupler array. The connector optically couples a plurality of optical fibers to the grating coupler array. The connector engages the integrated circuit at a first attachment point, a second attachment point, and a third attachment point. The first attachment point, second attachment point, and third attachment point are arranged such that a center of optical signals from the plurality of optical fibers remains substantially aligned with a center of the grating coupler array despite thermal expansion that occurs during operation of the integrated circuit.

Abstract: Techniques for identifying ultra-wideband interferers in a wireless communication network are disclosed. These techniques include scanning a plurality of channels relating to a wireless communication network and generating one or more spectrograms based on the scanning. The techniques further include identifying an ultra-wideband interferer for the wireless communication network, using the one or more spectrograms, including: analyzing, using the one or more spectrograms, at least one of: (i) power variations relating one or more channels, (ii) power slopes between one or more pairs of channels, (iii) a power level for one or more channels, (iv) carrier leakage, or (v) a period of pulse transmissions.

Abstract: Physical Layer Protocol Data Units (PPDUs) with an extension and specifically PPDUs with an extension for Ambient Power (AMP) Backscatter Device (BKD) excitation may be provided. A PPDU with an AMP BKD excitation extension can include an AMP BKD excitation extension field indicating the version and duration of the AMP BKD excitation extension. A method for providing the PPDU with the AMP BKD excitation extension includes generating the PPDU with the AMP BKD excitation extension and the AMP BKD excitation extension field and transmitting the PPDU with the AMP BKD excitation extension.

Abstract: In one implementation, a device may obtain performance metrics from vantage points distributed across a computing network. The device may map the performance metrics to a corresponding application based on a network address associated with the performance metrics. The device may establish a performance metric baseline for the corresponding application based on the performance metrics that are mapped to the corresponding application. The device may identify an anomaly in a performance metric mapped to the corresponding application based on a comparison to the performance metric baseline.

Abstract: A method comprises obtaining personal identifiable information (PII) acquired by a production environment of a software application. The method further comprises transforming the PII to produce de-identified data corresponding to the PII, and enabling access to the de-identified data corresponding to the PII by a development environment of the software application while preventing access to the PII by the development environment of the software application.

Abstract: Techniques for making the state of a peering connections or routes between SD-WAN routers of an SD-WAN fabric and external routers dependent on the state of a local instance of a service chain of redundant service chains in the SD-WAN fabric. In examples, an SD-WAN router may determine that a local instance of a service chain is unavailable for inspecting network traffic, and terminate a peering session with an external router such that routes through the SD-WAN router are no longer available to the external router. In other examples where the SD-WAN router determines that the local instance of the service chain is unavailable, the SD-WAN router may use an update message to notify the external router that certain routes are not available through the SD-WAN router for network traffic that needs to be service-chained.

Abstract: Techniques for optimizing technologies related to network path tracing and network delay measurements are described herein. Some of the techniques may include using an IPv6 header option and/or segment identifier field of a segment list or a TLV of a segment routing header as a telemetry data carrier. The techniques may also include using an SRv6 micro-segment (uSID) instruction to indicate to a node of a network that the node is to perform one or more path tracing actions and encapsulating the packet and forward. Additionally, the techniques may include using short interface identifiers corresponding to node interfaces to trace a packet path through a network. Further, the techniques may include using short timestamps to determine delay measurements associated with sending a packet through a network. In various examples, the techniques described above and herein may be used with each other to optimize network path tracing and delay measurement techniques.

Abstract: Techniques for a client device configured with a kernel driver framework (KDF) to establish connection(s) with target workload(s) provisioned in remote network(s) (e.g., an enterprise network) using non-routable synthetic IP address(es) (e.g., a loopback address within a link-local address range, a unique local address within a discard prefix range, and/or the like). The KDF may intercept DNS requests from application(s) executing on a client device, generate and return a synthetic IP address associated with a given domain in the DNS request, and establish a connection with a secure access gateway using the non-routable synthetic IP address. Additionally, the KDF may invoke an external browser with an authentication redirect to a randomly generated synthetic IP address on a randomly generated port, where a local listener on a client device may listen on the synthetic IP address and random port to obtain and/or store authentication data for later use.

Abstract: Embodiments described herein are directed to facilitating efficient management of analytics. In one embodiment, data representing an event associated with a tenant is obtained. Based on the tenant, an analytics pipeline corresponding to the tenant is accessed. The analytics pipeline may include a sequence of analytic indicators referencing a set of cybersecurity analytics, from among cybersecurity analytics in an analytics pool, desired for use in analyzing the data representing the event. The set of cybersecurity analytics, referenced by the analytic indicators in the analytics pipeline, is applied to the data to produce an analytic result. In embodiments, each cybersecurity analytic in the analytics pool is configured to detect a cybersecurity-related anomaly or threat. In accordance with detecting an analytic result, the analytic result, or data associated therewith, is provided to an external user computer system.

Abstract: Hybrid ranging may be provided. A coverage environment may be divided into a plurality of areas and a corresponding plurality accuracy gradients for each of the plurality of areas may be determined. Passive ranging may be implemented for ones of the plurality of areas that have a high accuracy gradient and one of a high client device density and low client device movement. Active ranging may be implemented for ones of the plurality of areas that have a low client device density. Based on at least one of a level of client device density and movement speed of client devices, switching may be performed between passive ranging and active ranging for ones of the plurality of areas that have at least one of high client device density and high client device movement.

Abstract: The present invention is related to a method for providing dynamic indexer discovery. The method comprises receiving, from an index manager, a status indication associated with a plurality of indexers, wherein each of the plurality of indexers indexes events of raw machine-generated data received from a plurality of data collectors. The method further comprises determining a weight associated with each of the plurality of indexers and selecting an indexer from the plurality of indexers. Subsequently, the method comprises allocating data to the indexer in accordance with a respective weight assigned to the indexer and transmitting the allocated data to the indexer.

Abstract: Methods that control use, trace ownership and authenticity of digital assets and/or brandmarks in a metaverse environment. The methods involve obtaining a first set of control properties associated with a digital asset and a second set of control properties associated with a brandmark. The first set of control properties define first usage rules for rendering the digital asset in the metaverse environment in which a user is immersed into a virtual environment and the second set of control properties define second usage rules for rendering the brandmark in the metaverse environment. The methods further involve determining whether the digital asset is compatible with the brandmark based on the first set of control properties and the second set of control properties and rendering the digital asset with the brandmark in the metaverse environment based on determining that the digital asset is compatible with the brandmark.

Abstract: A graphical user interface (GUI) for presentation of network security risk and threat information is disclosed. A listing is generated of incidents identified by use of event data obtained from a networked computing environment. A particular incident is determined to be associated with a risk object, wherein a risk object is a component of the networked computing environment. The listing is populated with a name associated with the risk object. Risk events associated with the incident are determined, wherein each risk event contributes to a risk score for the incident. The risk score indicates a potential security issue associated with the risk object. The listing is populated with the risk score and a summary of the events. An action is associated with the listing, for triggering display of additional information associated with the risk object. The listing can be displayed in a first display screen of the GUI.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for configuration payload separation policies. According to at least one example, a method is provided for device function. The method includes: during a boot sequence of a network device, generating a unique key for encrypting and decrypting data; identifying a secure location in the network device for storing the unique key; storing the unique key in the secure location; encrypting a configuration payload with the unique key; storing the encrypted configuration payload in an external non-volatile memory; and, in response to a request to access data within the configuration payload, decrypting the encrypted configuration payload using the unique key.

Abstract: Disclosed methods and systems for efficiently gathering reports from stations coupled to an access point via a wireless network. In some cases, the reports may be attached to block acknowledge frames, which often occur. Alternatively, when multiple stations operate with assigned resource units during a transmission opportunity (TXOP), the reports are embedded in the spare capacity of a physical protocol data units used during the TXOP.

Abstract: A method for file system destinations includes obtaining events for storage on one or more of the storage systems. For each event, the method includes extracting at least one field value from the event, comparing the at least one field value to configurations of the storage systems to identify at least one storage system of the plurality of storage systems having a matching configuration, transmitting the event to an ingest module queue for the at least one storage system, selecting a partition for the event based on the at least one field value to obtain a selected partition, mapping the selected partition to a file using a partition mapping, and appending the event to the file on the at least one storage system.

Abstract: Systems and techniques for performing traffic management in a wireless network using predictive traffic identifier (TID)-to-link mapping are described. An example technique includes obtaining one or more metrics associated with communication between a client station (STA) and an access point (AP) in a wireless network. The communication between the client STA and the AP is based on a first TID-to-link map. A second TID-to-link map is determined, based at least in part on evaluating the one or more metrics with a machine learning model. Communications between the client STA and AP are performed, based on the second TID-to-link map.