Abstract: Messages indicative of events are transmitted from a computer network to a management system using an agent device. The agent device receives a web service event collector from the management system. The web service event collector includes event message transformation instructions and an endpoint definition. After the web service event collector is initialized, an event message transmitted from an event source is received using the web service event collector. The event message indicates an event associated with the computer network. Using the event message transformation instructions, the event message is transformed into a format usable by the management system. The transformed event message is then transmitted to the management system.

Abstract: A request to sign a provided payload is received, wherein the payload includes an automation script specified to execute on one or more management service instances. The automation script is validated, including by modifying the payload to add metadata data associated with the validation. An encrypted version of a digital signature private key that was received is sent to a credential system. An unencrypted version is received and used to sign the modified payload. The signed modified payload is provided in response to the request to sign the provided payload. The signed modified payload is configured to, in response to a request to execute the automation script on the one or more of the management service instances, be verified using a public key corresponding to the digital signature private key and allow a validation of the automation script at least in part by using the included added metadata.

Abstract: A computational instance may contain queues configured to hold work items. The work items may be representations of user submissions requesting actions from a plurality of agents. The computational instance may also contain computing devices configured to: (a) obtain a set of assignment rules that specify mappings between (i) respective selection criteria for the assignment rules, and (ii) one or more candidate agents from the plurality of agents that can be assigned to address the work items with content that match the respective selection criteria, (b) read, from the queues, a work item corresponding to a user submission, (c) iterate through the assignment rules according to an ordering until a particular assignment rule with associated selection criteria that matches content of the work item is found, and (d) assign the work item to a particular agent from the one or more candidate agents.

Abstract: A network system may include a plurality of trainer devices and a computing system disposed within a remote network management platform. The computing system may be configured to: receive, from a client device of a managed network, information indicating (i) training data that is to be used as basis for generating a machine learning (ML) model and (ii) a target variable to be predicted using the ML model; transmit an ML training request for reception by one of the plurality of trainer devices; provide the training data to a particular trainer device executing a particular ML trainer process that is serving the ML training request; receive, from the particular trainer device, the ML model that is generated based on the provided training data and according to the particular ML trainer process; predict the target variable using the ML model; and transmit, to the client device, information indicating the target variable.

Abstract: A database query is received at a primary database in a query language of the primary database. A determination is made whether the database query is to be handled by a secondary database different from the primary database but storing synchronized records of at least a portion of the primary database. In response to determining that the database query is to be handled by the secondary database, the database query is translated to a query language of the secondary database, including by determining a tree data structure representation of the database query, translating one or more elements of the tree data structure representation, and synthesizing the tree data structure representation to automatically generate the database query in the query language of the secondary database. The automatically generated database query is provided in the query language of the secondary database to the secondary database.

Abstract: A computing system includes an anonymizer server. The anonymizer server is communicatively coupled to a data repository configured to store a personal identification information (PII) data. The anonymizer server is configured to perform operations including receiving a repository configuration request comprising an anonymized data schema, and creating an anonymized data repository clone based on the anonymized data schema. The anonymizer server is also configured to perform operations including anonymizing the PII data to create an anonymized data by applying a one-way data masking, a one-way data morphing, or a combination thereof, and storing the anonymized data in the anonymized data repository clone.

Abstract: Analytic data about digital chat conversations taking place within a digital workflow environment is tracked and stored. The analytic data tracks conversation progression states between individual node elements of at least one digital chat conversation flow design. A specification of an interested event for the analytic data is received. Data associated with the interested event is extracted and provided for analysis.

Abstract: A discovery application on a computing system is provided. The discovery application receives a user input, which is for discovery of resources associated with a cloud operating system of a cloud computing system. The user input includes an authentication credential and account information associated with the cloud operating system. Based on the received input, the discovery application executes a discovery pattern comprising operations for the discovery of resources. The cloud operating system includes a group of services to access such resources. At least one of the operations corresponds to an API call to an API endpoint associated with a service of the group of services. The discovery application receives a response to the API call from the cloud operating system. The response includes a payload of information associated with the resources. The discovery application updates, based on the received response, one or more configuration items in a configuration management database.

Abstract: An enterprise management platform is configured to host a respective instance for multiple client networks. The enterprise management platform receives incoming data including one or more metrics being tracked in the incoming data by the enterprise management platform. The enterprise management platform determines that a condition is reached based on the one or more metrics and selects at least a portion of the incoming data for a dashboard of the enterprise management platform responsive to determining that the incoming data is indicative of the condition being reached. The enterprise management platform provides, to a client device associated with one of the plurality of client networks, a representation of a graphical user interface displaying a data insights widget of the dashboard that displays the data indicative of the condition being reached without displaying other data in the incoming data that has not reached a level indicative of other conditions.

Abstract: Systems and methods for configuration vulnerability checking and remediation are provided. The systems provided herein identify risk based upon service indications of a particular configuration, such that automated risk analysis may be facilitated.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform and configured to: obtain, from an external computing system, information about a function-application arranged to execute source code segment(s) on demand; determine that the obtained information relates to (i) a plurality of authorization-keys each respectively arranged to authorize on-demand execution of one of the source code segments, (ii) a first key-value string pair that enables establishment of connectivity to a service of the external computing system or of another computing system, and/or (iii) a second key-value string pair that enables establishment of connectivity to a data source of the external computing system or of another computing system, and responsively determine association(s) between the source code segment(s), the function-application, the service, and/or the data source; and store the association(s) in t

Abstract: A cryptographic key of a first instance of a group of one or more cloud nodes providing a service is managed. A request to share the cryptographic key with a second instance of a different group of one or more cloud nodes is received. A determination is made whether the second instance is allowed to access the cryptographic key. In response to a determination that the second instance is allowed to access the cryptographic key, the cryptographic key is encrypted with a target key of the second instance and the encrypted cryptographic key is signed using a cryptographic signature of the first instance. The signed encrypted cryptographic key is provided to the second instance.

Abstract: A database system could include a first database engine, a second database engine, and a replication engine. The database system could also include processors configured to perform operations. The operations could involve obtaining indicators that are respectively associated with performance issues that can occur in the database system, each indicator defining one or more conditions that, when satisfied, cause the indicator to become active. The operations could also involve obtaining mappings between: (i) at least some of the indicators, and (ii) remediation subroutines.

Abstract: An example embodiment may include a computational instance and a computing device within a remote network management platform. The computing device may be configured to: receive, from a client device of the managed network, a request to redirect, to a second URL, future requests addressed to a first URL; provide, to the client device, instructions to generate a certificate that binds an identity of the entity that operates the managed network to the first URL; receive, from the client device, the certificate; store the certificate and a corresponding cryptographic key; and generate a mapping between the first URL and the second URL. The computational instance may be configured to, in response to receiving a content request referencing the destination, generate a content response containing content from the destination, where any hyperlinks to the second URL in the content are replaced with hyperlinks to the first URL.

Abstract: An embodiment may involve a plurality of configuration items and an unmatched configuration item, wherein the unmatched configuration item is associated with a first set of attribute values and a first vulnerability, wherein the first vulnerability is associated with a first set of field values.

Abstract: Persistent storage may contain a definition for components of a graphical user interface (GUI) and a layout, wherein a first plurality thereof are not configurable and a second plurality thereof are configurable, wherein the applications are respectively associated with different configurations of the second plurality of the components. One or more processors may be configured to: receive a request for a record of an application associated with a configuration of the second plurality of components; identify a first set of fields within the record that correspond to the first plurality of components; identify a second set of fields within the record that correspond to the second plurality of components; generate a representation of the GUI in which the first set of fields are in the first plurality of components and the second set of fields are in the second plurality of components; and transmit the representation of the GUI.

Abstract: Systems and methods are disclosed that predict whether a configuration item of a service provider cloud infrastructure client instance has a vulnerability, prior to scanning for the client instance for the vulnerability. In particular, operating system and/or application information of the vulnerability may be compared to that of the configuration item, operating system and/or application information of past vulnerabilities may be compared to that of the vulnerability, additional vulnerabilities that are solved by solutions that remedy the vulnerability may be compared to the configuration, and/or a machine-learning model may be trained to determine how similar past vulnerabilities of the configuration item are to the vulnerability. Based on one or more of these comparisons, a predicted vulnerable item may be generated that indicates that the configuration item is subject to the vulnerability.

Abstract: Web content with a speech interaction user interface capability is provided. Interactable elements of the web content are identified. For each of the interactable elements, one or more associated identifiers are determined and associated with a corresponding interactable element of the identified interactable elements in a data structure. A speech input is received from a user. Using the data structure, one of the interactable elements is matched to the received speech input. An action is automatically performed on the matched interactable element.

Abstract: A remote network management platform is provided that includes an end-user computational instance dedicated to a managed network, a training computational instance, and a prediction computational instance. The training instance is configured to receive a corpus of textual records from the end-user instance and to determine therefrom a machine learning (ML) model to determine the numerical similarity between input textual records and textual records in the corpus of textual records. The prediction instance is configured to receive the ML model and an additional textual record from the end-user instance, to use the ML model to determine respective numerical similarities between the additional textual record and the textual records in the corpus of textual records, and to transmit, based on the respective numerical similarities, representations of one or more of the textual records in the corpus of textual records to the end-user computational instance.

Abstract: Searching encrypted data using encrypted contexts by performing at least the following: configuring a first encryption context that allows access to a first encrypted field, configuring a second encryption context that allows access to a second encrypted field, assigning the first encryption context to a first role and the second encryption context to a second role, assigning the first role to a first user account to allow the first user account to access the first encrypted field, assigning the second role to a second user account to allow the second user to access the second encrypted field, receiving a query request associated with the first user account for a search term, wherein the query request includes instructions to search for an unencrypted version of the search term and a first encrypted value of the search term that is based on the first encryption context.