Abstract: An embodiment may include a machine learning based classifier that maps input observations into respective categories and a database containing a corpus of training data for the classifier. The training data includes a plurality of entries, each entry having an observation respectively associated with a ground truth category thereof. A computing device may be configured to select, from the training data, a plurality of subsets each containing a different number of entries. The computing device may also be configured to, for each particular subset: (i) divide the particular subset into a training portion and a validation portion, (ii) train the classifier with the training portion, (iii) provide the validation portion as input to the classifier as trained, and (iv) based on how entries of the validation portion are mapped to the categories, determine a respective precision for the particular subset.

Abstract: The embodiments herein provide a framework for and specific implementations of machine learning (ML) analysis of incident, online chat, knowledgebase, skills, and perhaps other types of databases. The ML techniques described herein may include various forms of semantic analysis of textual information in these databases, such as clustering, term frequency, word embedding, paragraph embedding, and potentially other techniques. Advantageously, use of ML in the specific ways described herein can provide insights into this textual information that otherwise would be impossible to determine in an accurate or concise fashion.

Abstract: A quarantine system could be disposed between an outer firewall and an inner firewall. The quarantine system may include persistent storage containing mappings between computing devices disposed within the inner firewall and data sources disposed outside the outer firewall. The quarantine system may include one or more processors configured to perform operations that include requesting and receiving, based on the mappings, a software-related update from a data source, the software-related update being targeted for deployment on the computing devices. The operations may also include assigning the software-related update for review by a group of one or more agents authorized to approve or reject the software-related update. The operations may also receiving an indication that the software-related update has been approved by the one or more agents and, responsive to receiving the indication, transmitting, based on the mappings, the software-related update to a recipient device within the inner firewall.

Abstract: An indication to view a selected record of a workflow is received. A user interface view for the selected record is provided that includes at least one embedded segment section with scrollable items representing other related records associated with the selected record. The user interface view for the selected record was configured to provide the at least one embedded segment section due to a configuration that includes a selection among automatically determined options of related record groups associated with the selected record.

Abstract: An indication that a secure connection has been established with a key management service is received. The secure connection is associated with an automatically generated session encryption key utilized for encryption of data communication through the secure connection. In response to the indication that the secure connection has been established with the key management service, a determination is made to perform a rotation of a local encryption key utilized in encrypting locally stored data. The rotation of the local encryption key is performed based at least in part on the automatically generated session encryption key.

Abstract: An example system for dynamic agent management involving multiple queues is presented. The system may include a remote network management platform that manages a network by way of a computational instance. A first group and a second group of agents may be assigned to address work items in a first queue in the computational instance. The second group may also be assigned to address and prioritize work items in a second queue in the computational instance. A computing device within the computational instance may assign a work item originating from a client device in the managed network into the first queue according to routing rules. The assignment may cause a timer to record a duration that the work item is in the first queue. The computing device may assign one of the second group of agents to address the work item based on the duration exceeding a pre-determined value.

Abstract: A computing system includes a database and a discovery application. The discovery application obtains credentials for accessing a server hosting a software bus application which connects a plurality of applications within a managed network. The discovery application selects, based on a pattern corresponding to the software bus application, one or more files to access, transmits, to the server, instructions to access the one or more files, and receives therefrom data identifying a plurality of attributes of the software bus application. Based on this data, the discovery application transmits, to the server, instructions to identify communicative connections established between the plurality of software applications by way of the software bus application and receives therefrom data identifying the communicative connections.

Abstract: A system, method, and non-transitory computer-readable storage medium for identifying resolutions have been disclosed. The system comprises a server device including a memory, a processor, and a network interface. The memory includes instructions executable by the processor to cause the system to record a series of actions associated with a client device and to receive, from the client device, incident data of an incident that is associated with the series of actions. The memory further includes instructions executable by the processor to cause the system to query a database for resolution information based on the series of actions and the incident data and to transmit a message that includes the resolution information to the client device.

Abstract: A computing system includes a database and a discovery application that initiates discovery of software applications within a managed network by probing the computing devices for applications in stalled thereon. The discovery application executes discovery patterns in an attempt to classify a discovered application and determines that the discovered application is unclassified after executing the discovery patterns. In response to determining that the discovered application is unclassified, the discovery application (i) generates a configuration item representing the discovered application without classification and (ii) selects a characteristic file containing attributes of the discovered application. The discovery application provides the characteristic file to a machine learning (ML) classifier trained using a plurality of characteristic files.

Abstract: Persistent storage may contain: (i) a database table containing entries, (ii) a definition of a communication endpoint of a remote system, and (iii) outbound flow processing. One or more processors may be configured to: detect a state change associated with a local entry in the database table; read, from the database table, a set of data representing the local entry; transform, using the outbound flow processing, the set of data into a format receivable by the remote system; create, for the set of data, a correlation record that contains a local correlation identifier, wherein the correlation record specifies the local entry; transmit, to the remote system, the set of data as transformed and the local correlation identifier; receive, from the remote system and for the set of data, a remote correlation identifier; add, to the correlation record, the remote correlation identifier; and write, to a correlation table, the correlation record.

Abstract: An analytics server is disclosed that enables natural language queries (NLQs) to be used to access key performance indicator (KPI) data. The analytics server includes a graphical user interface (GUI) that presents a set of KPIs associated with a user. The GUI includes suitable user interface elements to enable the user to provide natural language queries regarding these KPIs. The user interface elements provide the user with suggested NLQs based on, for example, KPIs to which the user has access and/or previous NLQs of the user. In response to the analytics server receiving a suitable NLQ from the user, the analytics server generates an appropriate database query to retrieve the KPI data requested by the NLQ. The GUI is then updated to present a visual representation (e.g., a bar graph, a pie chart, a trend line, a single value) of the retrieved KPI data.

Abstract: Systems, apparatuses, and methods for modifying metadata associated with database objects obtained from providers, such as cloud providers, are disclosed. Modifying metadata associated with database objects obtained from cloud providers may include identifying resources in a computer network that originate from providers, such as cloud providers that do not have associated metadata. A user interface that includes the resources may be generated, and the resource may receive input to select the resources and a descriptor that may be associated with the resources. The selected resources may then be associated, in a configuration management dataset, with metadata derived from the selected descriptor. The metadata may indicate an association of the selected resources to a parameter.

Abstract: An example embodiment involves persistent storage defining a first configuration item representing an application deployed within a network, a second configuration item representing a software program that is deployable within the network, and a relationship between the first configuration item and the second configuration item. One or more processors may be configured to: (i) receive an indication that a change has been applied to the application or has been arranged to be applied to the application; (ii) identify the relationship between the first configuration item and the second configuration item; (iii) based on the relationship between the first configuration item and the second configuration item, determine that the change can affect operation of the software program; and (iv) in response to determining that the change can affect operation of the software program, provide a notification of the change to an agent associated with the software program.

Abstract: A configuration associated with locating personally identifiable information stored in a database is received. An alternate metadata source separate from the database is identified. The separate alternate metadata source is searched using the configuration to identify locations in the database that store personally identifiable information.

Abstract: An example embodiment involves rules related to repairing software programs, wherein the rules associate indications of software program failures with repair applications that are configured to correct the software program failures. One or more processors are configured to: (i) receive, by a predictive model, a representation of an execution history of a particular software program, wherein the predictive model has been trained on a corpus of execution histories of the software programs; (ii) generate, by the predictive model and from the execution history, a failure prediction for the particular software program; (iii) receive, by an automated repair controller application, the failure prediction from the predictive model; (iv) based on applying the rules to the failure prediction, determine, by the automated repair controller application, a repair application from the repair applications; and (v) cause, by the automated repair controller application, the repair application to be executed within the network.

Abstract: A system may include a central computational instance configured to provide a service to a plurality of computational instances, wherein the service is associated with configurations respectively corresponding to the computational instances. The system may also include a computational instance dedicated to a managed network and storing a synchronization history specifying information that was synchronized between the computational instance and the central computational instance.

Abstract: A system may involve a communication bus and computational instances configured for communication with one another by way of the communication bus. The system is configured to: (i) receive, by a first computational instance, a first communication request, wherein the first communication request specifies first attributes; (ii) store, in a first persistent storage, the first attributes; (iii) generate a second communication request that specifies second attributes; (iv) transmit, by the first computational instance and to a second computational instance by way of the communication bus, the second communication request; (v) receive, by the second computational instance, the second communication request; (vi) store, in a second persistent storage, the second attributes; (vii) generate a third communication request that specifies third attributes; and (viii) transmit, by the second computational instance and to a third computational instance by way of the communication bus, the third communication request.

Abstract: A computing system includes persistent storage configured to store representations of software applications that include textual data respectively indicative of attributes of the software applications, and a mapping application configured to perform operations. The operations include retrieving a representation corresponding to a software application and, based thereon, identifying character strings present within textual data associated therewith. The operations also include generating, for each character string, a corresponding weight based on a frequency of the character string within the particular textual data and a frequency of the character string within textual data associated with at least a subset of the software applications. The operations additionally include selecting, from the character strings and based on the corresponding weights, candidate tags for the particular software application.

Abstract: An embodiment may involve storage containing incident logs and mappings between incident logs and vector representations generated by a machine learning (ML) model.

Abstract: A system includes a processor configured to perform operations, including receiving, from a client device, a request, associated with a user identifier, for rendering of a graphical user interface (GUI), and obtaining, based on the request and from persistent storage, a framework definition that specifies a first plurality of components and a layout thereof within the GUI. The operations also include determining a second plurality of components by way of a machine learning model and based on attributes associated with the user identifier, and determining, for each respective component of the second plurality of components, a corresponding visual format and a corresponding position within the GUI. The operations further include updating the framework definition by combining the first plurality of components and the second plurality of components based on the corresponding visual format and the corresponding position, and transmitting the framework definition as updated to the client device.