Abstract: The disclosed computer-implemented method for performing live migrations of software containers may include (i) identifying a request to migrate a software container from a source computing system to a target computing system while a process executes within the software container, (ii) creating a checkpoint of the process in execution (iii) transferring the checkpoint to the target computing system, (iv) updating the checkpoint recurrently by recurrently creating an incremental checkpoint of the process and merging the incremental checkpoint into the checkpoint, (v) predicting, before updating the checkpoint with an iteration of the incremental checkpoint and based on a size of the iteration of the incremental checkpoint, that finalizing a migration of the software container to the target computing system would meet a predetermined time objective, and (vi) finalizing the migration of the software container to the target computing system.

Abstract: A computer-implemented method for clustering data to improve data analytics may include (1) extracting a social graph from a data set of messages, the social graph indicating messages as edges such that nodes of the edges indicate corresponding senders and recipients in sender-recipient relationships, (2) detecting communities of collaborators by identifying clusters of nodes within the social graph, (3) applying the identified clusters of nodes within the social graph to a grouping calculation to group the messages of the data set into groups of messages, and (4) providing, through a computing interface, results of a data analytics operation to an end user based at least in part on applying the identified clusters of nodes within the social graph to the grouping calculation. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: The disclosed computer-implemented method for controlling access to information stored in an information retention system may include (1) receiving, at a computing device, metadata associated with an object type of respective objects, where at least two of the respective objects are in different domains, (2) determining, from the metadata, the respective object types of at least two objects, (3) forming a hierarchy of the at least two objects based on relative features of the respective object types, and (4) performing a security action comprising (A) receiving at least one access rule controlling access by at least one user to the at least two objects and (B) storing, in at least one storage device in the information retention system, the at least one access rule, the hierarchy of the objects, and the at least two objects. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: The disclosed computer-implemented method for detecting bit rot in distributed storage devices having failure domains may include (1) receiving, at a computing device, a combination of data chunks created by adding, for each failure domain storing data chunks, data chunks from different stripes, (2) receiving a combination of parity chunks created by adding, for each failure domain storing parity chunks, parity chunks from the different stripes, (3) creating at least one new parity chunk from the combination of data chunks, and (4) identifying a presence of bit rot in the failure domains when the at least one new parity chunk does not match the combination of parity chunks. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Disclosed herein are methods, systems, and processes to perform container-based upgrades to an appliance operating system. An upgraded container is generated by producing a container image. Producing the container image includes generating a checkpoint of a portion of a file system associated with an appliance that includes a portion of an operating system. The container includes the container image and is designated for an upgrade operation that upgrades the portion of the operating system.

Abstract: The disclosed computer-implemented method for file system metadata analytics may include (i) creating a set of training data to train a machine learning model to analyze tokens that describe files within a file system, the set of training data comprising a first set of vectors, wherein each vector represents tokens that describes files that are frequently accessed by a common set of users, and a second set of vectors, wherein each vector represents tokens that describes files with common file path ancestors, (ii) training, using the set of training data, the machine learning model, (iii) determining, by providing at least one input token to the machine learning model, that the input token is related to at least one additional token, and (iv) performing an action responsive to observing the input token and involving the additional token and the file system. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Disclosed are methods, systems, and processes to improve extent map performance A request for a data block is received. In response to detecting a cache miss, a temporary table is searched for the data block. If the data block is not found in the temporary table, a base table is searched for the data block.

Abstract: Disclosed herein are various embodiments that perform application-aware input/output (I/O) fencing operations, certain of which embodiments include, in response to detection of a network partition event in a cluster, determining a first application weight, determining whether the first one or more application instances should be delayed in a cumulative fencing race, performing the cumulative fencing race (in response to a determination that the first one or more application instances should be delayed in the cumulative fencing race), and performing the cumulative fencing race without introducing the delay with regard to the first one or more application instances (in response to a determination that the first one or more application instances should not be delayed in the cumulative fencing race).

Abstract: Various systems, methods, and processes for caching and referencing multiple fingerprints while data operations are ongoing are disclosed. A first fingerprint is generated based on a first fingerprinting process. The first fingerprint is stored in association with a second fingerprint, which is based on a second fingerprinting process. The first fingerprint and the second fingerprint are associated with the same data segment. Data operations such as a backup operation, a restore operation, or a replication operation can be performed while the conversion of the data segment from the second fingerprint to the first fingerprint is ongoing.

Abstract: Disclosed herein are various systems, methods, and processes for sharing a storage device with multiple virtual machines. A pseudo-identity is created for a storage device. Information in a hypervisor is configured to modify a response to a command issued to the storage device by a virtual machine. Physical characteristics of the storage device are determined and it is also determined whether the physical characteristics are acceptable. If the physical characteristics are acceptable, a virtual disk associated with the virtual machine is used. If the physical characteristics are unacceptable, a mapping of the virtual machine is migrated to another storage device.

Abstract: The disclosed computer-implemented method for generating a topic tree for digital information may include parsing the digital information and extracting a set of keywords. This method may also include comparing the set of keywords to an ontology and extracting hierarchies from the ontology that match the set of keywords. The extracted ontology entries may then be pruned and sorted. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Systems, apparatuses, methods, and computer readable mediums for performing a lazy bare metal restore process. A system may boot into a mini-OS environment and recover only the OS volumes while running in the mini-OS environment. Then, the system may boot into the target OS in restricted mode, using the recovered OS volumes, wherein restricted mode is utilized so as to prevent any applications from running. While the system is running the target OS in restricted mode, the system may restore the remainder of the backup data. Then, once all of the data has been recovered, the system may boot into the target OS in normal mode.

Abstract: Methods, computer program products, and computer systems for configuration management are disclosed. Such methods, computer program products, and computer systems include determining whether unstructured data or structured data is available for use as a basis to define an associative template, and in response to a determination that unstructured data is available for use as the basis to define the associative template, determining whether the unstructured data is hierarchically organized. In response to a determination that the unstructured data is hierarchically organized, an associative template can then be defined using the hierarchical organization of the unstructured data, where the unstructured data is hierarchically-organized unstructured data (HOUD).

Abstract: Disclosed herein are methods, systems, and processes to secure internal services in a distributed computing environment. A service packet that includes a service call from a source appliance is intercepted at a server. A determination is made that the service call is for an internal service provided by the source appliance and includes client information with client process properties. The service packet is demultiplexed. A determination is made that rule attributes associated with the internal service match the client process properties. The client information is removed from the service packet and the service call is forwarded to the server.

Abstract: Presented herein is functionality for using a recovery computing system to perform a failover where the recovery computing system is communicatively coupled to a homogeneous and/or heterogeneous primary computing system. In one embodiment, this functionality allows the recovery computing system to disconnect a first recovery application node from a contiguous storage volume after the contiguous storage volume had been created by the first recovery application node, and to then use a recovery gateway node to store replicated data on the continguous storage volume, where the recovery gateway node and the contiguous storage volume are both coupled to the recovery computing system. In response to detecting a failure on the primary computing system, performing a failover to the recovery computing system, where performing the failover comprises attaching the contiguous storage volume to a second recovery application node and bringing the second recovery application node online.

Abstract: The disclosed computer-implemented method for preparing email databases for analysis may include (1) identifying an email database that stores a plurality of emails in a plurality of tables that are formatted to be managed by a specific email application, (2) using a component of the specific email application to retrieve the plurality of emails from the database, (3) creating a denormalized dataset for the plurality of emails by combining email data from at least one table from the plurality of tables with email data from at least one other table from the plurality of tables, and (4) exporting at least a portion of the data from the denormalized dataset into at least one file in an interoperable format that is capable of being read by a plurality of applications. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: The disclosed computer-implemented method for updating email analytics databases may include (1) identifying an email database with a native format and an email analytics database that stores a copy of data in the email database in an analytics-friendly format that is denormalized relative to the native format of the email database, (2) capturing a log file comprising information that is about at least one recent change to the email database and that is formatted using the native format of the email database, (3) extracting the information about the recent change to the email database from the log file by transforming the information from the native format of the email database into the analytics-friendly format, and (4) updating the email analytics database to reflect the recent change to the email database by using the extracted information. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Disclosed herein are methods, systems, and processes to perform cloud replication based on adaptive Quality of Service. A replication stream is monitored over a period of time. The replication stream includes write operations issued by an application, and is associated with preset parameters. Replication parameters applicable to the replication stream are determined. The replication parameters are configured to be used in a replication operation. The preset parameters and the replication parameters are stored.

Abstract: Disclosed herein are methods, systems, and processes to perform dual-mode deduplication based on backup history. A fingerprint of a data segment of a data stream is calculated and a determination is made as to whether the fingerprint of the data segment matches a corresponding fingerprint in a cache. If the fingerprint matches the corresponding fingerprint, another fingerprint of a subsequent data segment of the data stream is calculated. If the fingerprint does not match the corresponding fingerprint, a segment boundary of the data stream is calculated based on a hash value, a determination is made that a new fingerprint calculated based on the segment boundary does not match the corresponding fingerprint, segment boundaries and new fingerprints are calculated, and a determination is made that a first fingerprint matches another corresponding fingerprint in the cache.

Abstract: The disclosed computer-implemented method for categorizing electronic messages for compliance reviews may include (1) identifying, as part of a compliance review for an organization, an uncategorized electronic message sent or received by a supervised user within the organization, (2) comparing the uncategorized electronic message with information gathered from previously categorized electronic messages sent or received by supervised users within the organization, (3) determining, based at least in part on the comparison, a relevance level of the uncategorized electronic message with respect to the compliance review, (4) receiving, from a compliance reviewer, feedback indicating whether the determined relevance level is correct, and (5) updating the previously gathered information based on the feedback from the compliance reviewer. Various other methods, systems, and computer-readable media are also disclosed.