Abstract: An analytics server is disclosed that enables natural language queries (NLQs) to be used to access key performance indicator (KPI) data. The analytics server includes a graphical user interface (GUI) that presents a set of KPIs associated with a user. The GUI includes suitable user interface elements to enable the user to provide natural language queries regarding these KPIs. The user interface elements provide the user with suggested NLQs based on, for example, KPIs to which the user has access and/or previous NLQs of the user. In response to the analytics server receiving a suitable NLQ from the user, the analytics server generates an appropriate database query to retrieve the KPI data requested by the NLQ. The GUI is then updated to present a visual representation (e.g., a bar graph, a pie chart, a trend line, a single value) of the retrieved KPI data.

Abstract: An embodiment may involve storage containing incident logs and mappings between incident logs and vector representations generated by a machine learning (ML) model.

Abstract: A system may involve a communication bus and computational instances configured for communication with one another by way of the communication bus. The system is configured to: (i) receive, by a first computational instance, a first communication request, wherein the first communication request specifies first attributes; (ii) store, in a first persistent storage, the first attributes; (iii) generate a second communication request that specifies second attributes; (iv) transmit, by the first computational instance and to a second computational instance by way of the communication bus, the second communication request; (v) receive, by the second computational instance, the second communication request; (vi) store, in a second persistent storage, the second attributes; (vii) generate a third communication request that specifies third attributes; and (viii) transmit, by the second computational instance and to a third computational instance by way of the communication bus, the third communication request.

Abstract: A computing system includes persistent storage configured to store representations of software applications that include textual data respectively indicative of attributes of the software applications, and a mapping application configured to perform operations. The operations include retrieving a representation corresponding to a software application and, based thereon, identifying character strings present within textual data associated therewith. The operations also include generating, for each character string, a corresponding weight based on a frequency of the character string within the particular textual data and a frequency of the character string within textual data associated with at least a subset of the software applications. The operations additionally include selecting, from the character strings and based on the corresponding weights, candidate tags for the particular software application.

Abstract: A system may include a central computational instance configured to provide a service to a plurality of computational instances, wherein the service is associated with configurations respectively corresponding to the computational instances. The system may also include a computational instance dedicated to a managed network and storing a synchronization history specifying information that was synchronized between the computational instance and the central computational instance.

Abstract: Messages indicative of events are transmitted from a computer network to a management system using an agent device. The agent device receives a web service event collector from the management system. The web service event collector includes event message transformation instructions and an endpoint definition. After the web service event collector is initialized, an event message transmitted from an event source is received using the web service event collector. The event message indicates an event associated with the computer network. Using the event message transformation instructions, the event message is transformed into a format usable by the management system. The transformed event message is then transmitted to the management system.

Abstract: A system includes a processor configured to perform operations, including receiving, from a client device, a request, associated with a user identifier, for rendering of a graphical user interface (GUI), and obtaining, based on the request and from persistent storage, a framework definition that specifies a first plurality of components and a layout thereof within the GUI. The operations also include determining a second plurality of components by way of a machine learning model and based on attributes associated with the user identifier, and determining, for each respective component of the second plurality of components, a corresponding visual format and a corresponding position within the GUI. The operations further include updating the framework definition by combining the first plurality of components and the second plurality of components based on the corresponding visual format and the corresponding position, and transmitting the framework definition as updated to the client device.

Abstract: A request to sign a provided payload is received, wherein the payload includes an automation script specified to execute on one or more management service instances. The automation script is validated, including by modifying the payload to add metadata data associated with the validation. An encrypted version of a digital signature private key that was received is sent to a credential system. An unencrypted version is received and used to sign the modified payload. The signed modified payload is provided in response to the request to sign the provided payload. The signed modified payload is configured to, in response to a request to execute the automation script on the one or more of the management service instances, be verified using a public key corresponding to the digital signature private key and allow a validation of the automation script at least in part by using the included added metadata.

Abstract: A computational instance may contain queues configured to hold work items. The work items may be representations of user submissions requesting actions from a plurality of agents. The computational instance may also contain computing devices configured to: (a) obtain a set of assignment rules that specify mappings between (i) respective selection criteria for the assignment rules, and (ii) one or more candidate agents from the plurality of agents that can be assigned to address the work items with content that match the respective selection criteria, (b) read, from the queues, a work item corresponding to a user submission, (c) iterate through the assignment rules according to an ordering until a particular assignment rule with associated selection criteria that matches content of the work item is found, and (d) assign the work item to a particular agent from the one or more candidate agents.

Abstract: A database query is received at a primary database in a query language of the primary database. A determination is made whether the database query is to be handled by a secondary database different from the primary database but storing synchronized records of at least a portion of the primary database. In response to determining that the database query is to be handled by the secondary database, the database query is translated to a query language of the secondary database, including by determining a tree data structure representation of the database query, translating one or more elements of the tree data structure representation, and synthesizing the tree data structure representation to automatically generate the database query in the query language of the secondary database. The automatically generated database query is provided in the query language of the secondary database to the secondary database.

Abstract: A network system may include a plurality of trainer devices and a computing system disposed within a remote network management platform. The computing system may be configured to: receive, from a client device of a managed network, information indicating (i) training data that is to be used as basis for generating a machine learning (ML) model and (ii) a target variable to be predicted using the ML model; transmit an ML training request for reception by one of the plurality of trainer devices; provide the training data to a particular trainer device executing a particular ML trainer process that is serving the ML training request; receive, from the particular trainer device, the ML model that is generated based on the provided training data and according to the particular ML trainer process; predict the target variable using the ML model; and transmit, to the client device, information indicating the target variable.

Abstract: A computing system includes an anonymizer server. The anonymizer server is communicatively coupled to a data repository configured to store a personal identification information (PII) data. The anonymizer server is configured to perform operations including receiving a repository configuration request comprising an anonymized data schema, and creating an anonymized data repository clone based on the anonymized data schema. The anonymizer server is also configured to perform operations including anonymizing the PII data to create an anonymized data by applying a one-way data masking, a one-way data morphing, or a combination thereof, and storing the anonymized data in the anonymized data repository clone.

Abstract: Analytic data about digital chat conversations taking place within a digital workflow environment is tracked and stored. The analytic data tracks conversation progression states between individual node elements of at least one digital chat conversation flow design. A specification of an interested event for the analytic data is received. Data associated with the interested event is extracted and provided for analysis.

Abstract: A discovery application on a computing system is provided. The discovery application receives a user input, which is for discovery of resources associated with a cloud operating system of a cloud computing system. The user input includes an authentication credential and account information associated with the cloud operating system. Based on the received input, the discovery application executes a discovery pattern comprising operations for the discovery of resources. The cloud operating system includes a group of services to access such resources. At least one of the operations corresponds to an API call to an API endpoint associated with a service of the group of services. The discovery application receives a response to the API call from the cloud operating system. The response includes a payload of information associated with the resources. The discovery application updates, based on the received response, one or more configuration items in a configuration management database.

Abstract: An enterprise management platform is configured to host a respective instance for multiple client networks. The enterprise management platform receives incoming data including one or more metrics being tracked in the incoming data by the enterprise management platform. The enterprise management platform determines that a condition is reached based on the one or more metrics and selects at least a portion of the incoming data for a dashboard of the enterprise management platform responsive to determining that the incoming data is indicative of the condition being reached. The enterprise management platform provides, to a client device associated with one of the plurality of client networks, a representation of a graphical user interface displaying a data insights widget of the dashboard that displays the data indicative of the condition being reached without displaying other data in the incoming data that has not reached a level indicative of other conditions.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform and configured to: obtain, from an external computing system, information about a function-application arranged to execute source code segment(s) on demand; determine that the obtained information relates to (i) a plurality of authorization-keys each respectively arranged to authorize on-demand execution of one of the source code segments, (ii) a first key-value string pair that enables establishment of connectivity to a service of the external computing system or of another computing system, and/or (iii) a second key-value string pair that enables establishment of connectivity to a data source of the external computing system or of another computing system, and responsively determine association(s) between the source code segment(s), the function-application, the service, and/or the data source; and store the association(s) in t

Abstract: A cryptographic key of a first instance of a group of one or more cloud nodes providing a service is managed. A request to share the cryptographic key with a second instance of a different group of one or more cloud nodes is received. A determination is made whether the second instance is allowed to access the cryptographic key. In response to a determination that the second instance is allowed to access the cryptographic key, the cryptographic key is encrypted with a target key of the second instance and the encrypted cryptographic key is signed using a cryptographic signature of the first instance. The signed encrypted cryptographic key is provided to the second instance.

Abstract: Systems and methods for configuration vulnerability checking and remediation are provided. The systems provided herein identify risk based upon service indications of a particular configuration, such that automated risk analysis may be facilitated.

Abstract: A database system could include a first database engine, a second database engine, and a replication engine. The database system could also include processors configured to perform operations. The operations could involve obtaining indicators that are respectively associated with performance issues that can occur in the database system, each indicator defining one or more conditions that, when satisfied, cause the indicator to become active. The operations could also involve obtaining mappings between: (i) at least some of the indicators, and (ii) remediation subroutines.

Abstract: An example embodiment may include a computational instance and a computing device within a remote network management platform. The computing device may be configured to: receive, from a client device of the managed network, a request to redirect, to a second URL, future requests addressed to a first URL; provide, to the client device, instructions to generate a certificate that binds an identity of the entity that operates the managed network to the first URL; receive, from the client device, the certificate; store the certificate and a corresponding cryptographic key; and generate a mapping between the first URL and the second URL. The computational instance may be configured to, in response to receiving a content request referencing the destination, generate a content response containing content from the destination, where any hyperlinks to the second URL in the content are replaced with hyperlinks to the first URL.