Abstract: Specifications of digital certificate validation security policies for a server within an intranet environment are received. A first one of the policies is specified to be applied for an intranet network connection and a second for a network connection outside the intranet. Each of the first and second policies includes a plurality of different configurable individual settings to enable or disable corresponding individual components of a plurality of different component digital certificate validation checks. A determination is made to establish a connection with a network destination and a digital certificate from the destination is received. One of the policies to apply for the connection is identified. For each of the plurality of the different component checks, a determination is made based on the identified policy whether to perform the component check for the received certificate. Any of the plurality of the different component checks determined to be performed are performed.

Abstract: A financial close automation (FCA) system receives or retrieves account data from one or more enterprise resource planning products (ERPs). The FCA examines the balance sheet for a given account and determines whether the account is auto-certifiable, and whether the unknown balance is below a threshold amount. If the answer to either inquiry is no, the FCA generates a task for the general ledger owner to provide an explanation for the discrepancy. A task is the created for a manager to review the provided explanation. If the manager does not approve of the provided explanation, additional information may be required. Once the manager approves the provided explanation for the discrepancy, the account is certified. If the account is auto-certifiable and the unknown balance is below the threshold amount, the account is auto-certified.

Abstract: Metrics that characterize one or more computing devices are received. A time value associated with a performance of the one or more computing devices based on the received metrics is determined. A first scheduling parameter based on the time value is determined, wherein the first scheduling parameter is associated with a first discovery process that is associated with at least a portion of the one or more computing devices. Execution of the first discovery process is executed according to the first scheduling parameter.

Abstract: A system for root cause analysis based on process optimization data is provided. The system receives log data associated with a first trace between a first activity and a second activity of a process. The system further determines a state of inefficiency between the first activity and the second activity based on the received log data. The system further applies a first machine learning (ML) model on the received log data. The system further determines a first label and a first value to be associated with the first trace of the process based on the application of the first ML model. The system further generates presentation data associated with the determined state of inefficiency of the first trace based on the determination of the first label and the first value and further transmits the generated presentation data on a user device.

Abstract: A computer program component configured to collect configuration item data from information technology resources of an air-gapped network for an information technology configuration management database is provided. Configuration item data collected from the information technology resources of the air-gapped network is obtained using the provided computer program component, wherein the obtained configuration item data is physically transferred between a device within the air-gapped network and a device outside the air-gapped network at least in part via a portable physical storage medium, and the collected configuration item data has been reviewed and filtered within the air-gapped network prior to being physically transferred via the portable physical storage medium. The obtained configuration item data is imported to the information technology configuration management database outside the air-gapped network.

Abstract: A search index is generated from one or more data records, wherein the one or more data records have contents in a plurality of different fields. Field information of the one or more data records is stored in the search index as specialized indexed elements, wherein the specialized indexed elements overlap with other indexed elements of the one or more data records. A search query is received from a user allowed to access only a portion of the plurality of different fields. The search query is processed within the portion of the plurality of different fields using the search index including the specialized indexed elements.

Abstract: An embodiment may involve storage containing incident logs and mappings between incident logs and vector representations generated by a machine learning (ML) model.

Abstract: A system includes a processor and memory storing instructions that cause the processor to receive, from a client device, inputs defining associations between one or more control objectives and one more policies, wherein the one or more control objectives define one or more functions to be performed to comply with the one or more policies. The processor may map the one or more policies associated with the one or more control objectives to an application environment and receive, from the client device or a different client device, a change set to an application in the application environment, wherein the change set comprises one or more modifications to the application. The processor may then determine whether the change set adheres to the one or more policies and restrict implementation of the change set in response to determining that the change set does not adhere to the one more policies.

Abstract: The present approach relates to systems and methods for facilitating a client-agent conversation using dynamic, contextual information related to a client portal. The contextual information for the conversation may be determined using a server side script and/or a client side script that provides relevant portal usage data. The contextual information may be used to determine a conversation topic, which may be used to facilitate routing a request to chat to the appropriate agent for the topic.

Abstract: A computing system includes a server. The server is communicatively coupled to a data repository and is configured to store a data in the data repository. The server is further configured to create, via a visual information flow creation tool, at least one information flow object, wherein the at least one information flow object comprises a flow, a sub-flow, an Action, or a combination thereof. The server is also configured to interface with the at least one information flow object via a front-end application programing interface (API), a back-end API, or a combination thereof. The server is additionally configured to execute the at least one information flow object via the front-end API, the back-end API, or a combination thereof, and to retrieve results obtained by executing the at least one information flow object via the front-end API, the back-end API, or the combination thereof.

Abstract: An example embodiment may involve communicating with a server to separately access first and second records of sessions between the server and computing devices of a network, the first record including a first set of fields not present in the second record and the second record includes a second set of fields not present in the first record; identifying a common field present the first and second records; correlating information across the first and second records using the common field; using a set of license misuse criteria to identify, from the correlated information, (i) a set of the sessions that meets the set of criteria and (ii) a network address of a target device involved in the set of sessions; identifying the target device using the network address; and storing an indication identifying the target device as a potential source of misuse of licensed software executable on the server.

Abstract: Example embodiments for identifying and displaying configuration item information are presented herein. A system may involve a proxy server application disposed within a managed network that includes configuration items and a server disposed within a remote network management platform managing the managed network. The server may receive a request to view information representative of a particular configuration item from a client device. Based on the request, the server may obtain the information and transmit a representation of a graphical user interface to the client device. The representation may include a health graphic, a relationship graphic, a timeline graphic, and an activity stream, each of which represent pertinent information about the particular configuration item. The representation may also include a tabbed interface that facilitates navigation between attributes corresponding to the particular configuration item and attributes corresponding to other configuration items in the managed network.

Abstract: A discovery application on a computing system is provided. The discovery application executes a discovery pattern comprising a sequence of operations for discovery of resources within a load balancing system, wherein execution of the discovery pattern corresponds to making one or more application programming interface (API) calls to an API associated with a network address of the load balancing system; receives a response to the one or more API calls from the load balancing system, wherein the response comprises a payload of information associated with the resources; and updates, based on the response and in a configuration management database (CMDB), one or more configuration items (CIs) associated with the resources.

Abstract: An example embodiment may involve receiving, from a client device, a request to access a web-based resource of a computational instance. The embodiment may also involve accessing data defining one or more change indications for one or more respective program code units, wherein each of the one or more change indications indicates that a respective program code unit of the one or more program code units has been changed since a most recent software release. The embodiment may also involve generating, for display via the client device, a representation of the web-based resource that includes a region specifying the one or more respective program code units for which there are change indications.

Abstract: An embodiment may involve a database including a table, wherein the table contains database records and a schema by which the database records are arranged. The embodiment may further involve one or more processors configured to: obtain a query that references the table and one or more elements of the schema; copy at least part of the table into a second table; transform, using a deterministic one-way function, the schema of the second table and the database records within the second table; transform, using the deterministic one-way function, the query into a second query; and write, to memory, at least part of the second table and the second query.

Abstract: A machine learning model is trained based at least on previous change requests, wherein each of the previous change requests are associated with a controlled management of a lifecycle of a change to an information technology environment. A security vulnerability of the information technology environment is identified. Using the trained machine learning model, a corresponding match score for each of a plurality of pending change requests is determined for the security vulnerability. An indication of whether a resolution specification for the security vulnerability is to be linked with one of the plurality of pending change requests selected based on a factor associated with its corresponding match score is received.

Abstract: One or more parameters of one or more processes identified as belonging to a specific process grouping among a plurality of process groupings are obtained. Eligible token words in the one or more parameters are identified. The eligible token words are processed to select a subset within the eligible token words that are likely descriptive of the specific process grouping. The selected subset within the eligible token words is utilized to determine a descriptive identifier associated with the specific process grouping.

Abstract: A conversation design is received for a conversation bot that enables the conversation bot to provide a service using a conversation flow specified at least in part by the conversation design. The conversation design specifies in a first human language at least a portion of a message content to be provided by the conversation bot. It is identified that an end-user of the conversation bot prefers to converse in a second human language different from the first human language. In response to a determination that the message content is to be provided by the conversation bot to the end-user, the message content of the conversation design is dynamically translated for the end-user from the first human language to the second human language. The translated message content is provided to the end-user in a message from the conversation bot.

Abstract: A system and method for providing content for display form data sources on a client device are provided. The method includes receiving, by a distribution server, a report identifier associated with a report and a request for information, wherein the information is requested based on the report; determining by the distribution server at least a data source, the at least a data source storing at least a portion of the information; requesting access from the integration server to the at least a data source to retrieve the at least a portion of the information; and sending from the distribution server to the client device, the at least a portion of the information, wherein the at least a portion of information is utilized in the report. In an embodiment, the data sources are accessible by an integration server.

Abstract: The representative embodiments discussed in the present disclosure relate to techniques with which data packet loss, such as Transmission Control Protocol (TCP) packet loss, may be detected. More specifically, in some embodiments, by detecting a TCP packet with an enabled selective acknowledgement (SACK) signal, the loss (e.g., drop) of an additional TCP packet may be determined. Moreover, using information included in the detected TCP packet, an operational efficiency of a cloud computing system and/or a component of the cloud computing system may be determined.