Abstract: Garbage collection roots for an application may be identified based on a garbage collector implemented in a programming environment. A garbage collection root may correspond with an object and a class definition. Retained memory values may be determined for the garbage collection roots via a graph dominator. A retained memory value may indicate an amount of memory employed by a garbage collection root. Application classes and associated class memory values may be determined. An application class may include one or more of the garbage collection roots associated with object class definitions positioned within a portion of a class definition hierarchy corresponding with the respective application class. A class memory value may aggregate the retained memory values for garbage collection roots included within an application class. A source of a change in memory usage between application versions may be identified based on the application classes and class memory values.

Abstract: Systems, methods, and devices are disclosed herein that provide security for requests sent to services in service meshes. A computing platform may be implemented using a server system. The computing platform is configurable to cause receiving a request from a service in a cloud-based computing environment, and identifying a chain of trust embedded in a portion of the request, the chain of trust being generated by one or more security entities in the cloud-based computing environment, the chain of trust identifying results of one or more security verification operations performed on the request. The computing platform is further configurable to cause determining if the chain of trust is a valid chain of trust based, at least in part, on one or more security policies, and sending the request to another entity in the cloud-based computing environment in response to determining the chain of trust is a valid chain of trust.

Abstract: Devices, systems and methods are provided for managing records. One method involves constructing a fuzzy match graph data structure with edges between different field values for a fuzzy matched field of a plurality of records in accordance with a matching rule, assigning unique identifiers to different subgraphs of field values within the fuzzy match graph data structure, determining a match key value associated with a respective record based on a respective unique identifier assigned to a respective subgraph of field values including a respective field value for the fuzzy matched field of the respective record, constructing a heterogenous graph data structure having edges between the respective match key values associated with the respective records of the plurality of records, identifying a subset of related records using the heterogenous graph data structure, and performing one or more actions on the subset of related records at a database system.

Abstract: The technology disclosed can query configuration management system data and includes cross table selection criteria and joined data return.

Abstract: Usage of Pluggable Authentication Module (PAM) for time bound access control to any PAM enabled Linux application predicated by rules stored in an LDAP directory including a processor to execute computer-executable instructions for receiving a user information from a user interface indicative of a user, receiving an access request via PAM indicative of the user information, a time of invocation of the access request and the host server, querying a lightweight directory access protocol directory in response to the user information and the request, receiving a plurality of attribute values associated with the user information including a time bound access limit and a host access restriction information, and coupling an access success response to the pluggable access module in response to a host server access allowance indicated by the host access restriction information for the host service and the time of invocation being within the time bound access limit.

Abstract: Database systems and methods are provided for parallel processing heterogenous jobs at a database system. One method involves identifying database records corresponding to a batch of jobs and identifying, for the respective jobs, a respective set of related database records associated with the respective job based on a respective value for a metadata field of the respective database record corresponding to the respective job. The metadata field value uniquely identifies the respective set of related database records associated with the respective database record. The method divides the batch of jobs into chunks based on the respective sets of related database records associated with the respective jobs. Each chunk includes a respective subset of the batch of jobs having an aggregate workload based on the respective sets of related database records associated with the respective jobs of the respective chunk that is less than a chunking threshold.

Abstract: Methods, systems, and storage media are described for software installation configuration. In particular, some implementations are directed to configuring software instances by identifying and executing select software processes using parameters generated based on configuration information from a user. Other implementations may be disclosed or claimed.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for generating and implementing computational graphs that facilitate concurrent computation on data streams. A computational graph includes a plurality of nodes, where each node has one or more stages associated therewith. Each stage may be associated with a corresponding operation that is to be performed on data associated with that stage.

Abstract: This disclosure relates to tools to facilitate the configuration of interactive agents, sometimes referred to as bots, chatbots, virtual robots, or talkbots. Specifically, the disclosure relates to the provision of a map view visualization of an interactive agent. The map view can display a complexity indicator or usage percentage for each dialog and provide an easy mechanism for creation of new dialogs, actions, parameters, rules, and logic.

Abstract: Techniques are disclosed relating to storing location information about storage nodes in cookies. A cloud-based service may send location requests to an orchestration service that instantiated storage nodes included in a storage cluster of the cloud-based service. The cloud-based service may receive location information that identifies in which computer zone that a given storage node is located. The cloud-based service may store the location information in cookies at a metadata store that is shared among the storage nodes. The cloud-based service may receive, from a client node, a search request to identify ones of the storage nodes that store particular data. The cloud-based service may return a set of cookies corresponding to identified storage nodes. The set of cookies may enable the client node to determine whether there is a storage node that stores the particular data and is within the same computer zone as the client node.

Abstract: Some embodiments comprise integrating information from a social network into a multi-tenant database system. A plurality of information from the social network is retrieved, using a processor and a network interface of a server computer in the multi-tenant database system, wherein the plurality of information is associated with a message transmitted using the social network. Metadata related to the transmitted message is generated, using the processor. A conversation object is generated, using the processor, based on the plurality of information associated with the transmitted message and the metadata related to the transmitted message. The conversation object is then stored in an entity in the multi-tenant database system, using the processor of the server computer.

Abstract: An online system monitors resources utilization by users connecting with the online system and detects unauthorized resource utilization caused by sharing of sessions. The online system collects samples of browser attributes from browsers interacting with the online system. The online system determines a score indicating a difference between two samples of browser attributes taken at different times. The online system uses the score to determine whether the two samples of browser attributes in the same session were received from different browsers. If the online system detects unauthorized resource utilization if the two samples are determined to be from two different browsers. The online system takes mitigating actions, for example, by invalidating the session or requiring users to re-enter credentials.

Abstract: A database system is disclosed. The database system may receive a plurality of records representing changes made to a plurality of datasets, and the plurality of records may include a plurality of data change instances associated with a plurality of data schema types. The plurality of data change instances may correspond to a plurality of respective keys. The database system may compute an average size of data for each data schema type of the plurality of data schema types. The database system may modify the plurality of respective keys through a salting process, which may include assigning non-overlapping numerical ranges to subsets of the plurality of respective keys. The database system may sort, using the non-overlapping numerical ranges, the plurality of data change instances into a plurality of partitions of a target file size. The database system may write files of the target file size to a data store.

Abstract: Media, methods, and systems of recommending personalized help content within a group-based communication system. A machine learning model trained with prior user interaction data and historical user engagement data is used to generate a list of recommended help content based at least in part on received user interaction data for a user.

Abstract: Implementations(s) for deploying application(s) are described. Responsive to an indication to install a specific instance of an application registered in a registry, first and second code are retrieved from the registry to cause the installation. Responsive to the first and second code, it is detected that the first code is executable to receive information that will be generated responsive to execution of the second code; the specific instance of the second part of the application is caused to be deployed on the second technology stack (TS) using the fourth code identified in the second code; the information is received; and a specific instance of the first part of the application is caused to be deployed on the first TS using the third code identified in the first code and to be configured to communicate with the specific instance of the second part of the application using the information.

Abstract: A document object may be transmitted to a plurality of user devices. The document object may include at least one field for display of a content object of a group of content objects. The field may be associated with an identifier corresponding to the group of content objects. When the document object is accessed, then the access may trigger a request to a server, which may select a content object of the group of content objects using a content object identification function. The content object identification function may be dynamically updated based at least in part on the document object being accessed by one or more of the plurality of user devices. Responsive to the request, a unique content object identifier corresponding to the selected content object may be transmitted to the user device and displayed at the accessed document object.

Abstract: Methods, systems, apparatuses, and computer program products are described. A system, such as a multi-tenant database system, may store tenant-specific observability data for multiple tenants of the system. The system may detect an inefficiency related to a performance metric for a tenant of the multiple tenants based on a subset of the data associated with the tenant and corresponding to a threshold time window. In some examples, the system may analyze the subset of the data for the threshold time window to determine an insight indicating a cause of the inefficiency. The system may determine a suggested action for the tenant based on the insight indicating the cause of the inefficiency, and the system may send, for display at a user interface of a user device, an indication of the insight and the suggested action, the user device operated by a user associated with the tenant.

Abstract: An application server may receive an input document including a set of input text fields and an input key phrase querying a value for a key-value pair that corresponds to one or more of the set of input text fields. The application server may extract, using an optical character recognition model, a set of character strings and a set of two-dimensional locations of the set of character strings on a layout of the input document. After extraction, the application server may input the extracted set of character strings and the set of two-dimensional locations into a machine learned model that is trained to compute a probability that a character string corresponds to the value for the key-value pair. The application server may then identify the value for the key-value pair corresponding to the input key phrase and may out the identified value.

Abstract: A method and system uses a test cloud system for monitoring cloud to cloud performance. The method includes initiating a first trust relationship by the test cloud system with a first target cloud system, receiving a success indicator for the trust relationship, in response to the first target cloud verifying the test cloud system is whitelisted, generating a security token using a private key of the test cloud system, and invoking a function of an application programming interface of the first target cloud using the security token to validate functionality of the function of the application programming interface of the first target cloud.

Abstract: Disclosed are some examples of systems, methods, and computer program products for suggesting actions for evaluating user performance in a social networking system. In some implementations, textual input of a social media message is processed. The processing can include determining that data of the textual input indicates an evaluation of performance of a user of the social networking system. A prompt can be displayed, requesting submission of information evaluating performance of the user. A performance evaluation record can be generated or updated in a database to store the evaluating information in association with an identification of the user, and an indication of the evaluating information can be shared in a feed of the social networking system.

Abstract: An application for creating an editing a knowledge graph for document retrieval and exploration. The application may create a data structure, arranged as a directed acyclic graph (DAG), based on user input indicative of categories within a taxonomy and documents within an information repository. The DAG may have a top-level node, interior nodes, and leaf nodes. Interior nodes correspond to taxonomic classifications and point to other interior nodes or leaf nodes. Leaf nodes have corresponding interior nodes and include links to one or more documents in the information repository. The application permits editing of nodes, but does so in a way that preserves links to the arrangement of nodes prior to the editing. The application also permits traversal of nodes of the data structure via a user interface in which a representation of a given node includes an indication of one or more possible paths for reaching the given node.

Abstract: Users may be authorized to access a second software environment with a second limited set of authorized users. The second software environment may include at a first point in time prior to the user access a subset of a first software environment that includes at the first point in time a first set of authorized users that was a superset of the second limited set. A determination may be made as to whether a first user has potentially been a member of the first set of authorized users. The determination may be made via a global filtering process with at least one first hash value associated with a login attempt by the first user whether.

Abstract: Server instantiation or deployment with at least an orchestrated post-deployment configuration service utilizing an exemplary framework providing script orchestration, logging, retry logic and environment-specific infrastructure and service configurations. At least one repository may store configuration scripts (or their equivalent), including first scripts associated with, e.g., a multi-tenant system, vendor, database provider, controller, etc., and second scripts associated with, e.g., a tenant, a database client, customer, etc. After instantiating or installing a server, it may be configured with orchestrated execution to ensure successful first server configuration, and then further configured with orchestrated execution of second scripts to ensure successful subsequent server configuration. Orchestration includes retry logic, logging, and reboot support to repeat or continue script execution after reboot, and the number of scripts series is arbitrary, e.g., there may first, second, third, etc.

Abstract: A recommendation service access a data matrix listing of products associated with product profiles, the data matrix having product entries that store sparse historical electronic activity. For a target product it is determined which other products should be used to boost the historical electronic activity of the target product based on a first subset of product profiles that share product characteristics with the target product. Similarity scores are computed between the product profile of the target product and the first subset of product profiles to identify a second subset of one or more products having a similarity score above a scoring threshold. The historical electronic activity of the target product is boosted using the historical electronic activity of the other products in the second subset. Association values are calculated between the target product and the other products in the second subset by based on the boosted activity.

Abstract: A header and a timestamp element for the header may be generated based on a request to process data for a page of a user interface. A tooltip with descriptive information for the timestamp element may be generated and displayed based on proximity of an interactive element to the timestamp element, and a page representation window may be displayed based on an interaction with the timestamp element. The page representation window includes a representation of the data field and its content that is indicative of how the data field and its content existed at a time of the request to process data. Moreover, an indicator of correspondence between the timestamp element and the page representation window may be displayed. Based on interaction with a settings indicator element, a header settings window for modifying settings for the header may be displayed with view options (e.g., all, custom, etc.) for data submissions.

Abstract: Artificial intelligence (AI) technology can be used in combination with composable communication goal statements to facilitate a user's ability to quickly structure story outlines in a manner usable by an NLG narrative generation system without any need for the user to directly author computer code. Narrative analytics that are linked to communication goal statements can employ a conditional outcome framework that allows the content and structure of resulting narratives to intelligently adapt as a function of the nature of the data under consideration. This AI technology permits NLG systems to determine the appropriate content for inclusion in a narrative story about a data set in a manner that will satisfy a desired communication goal.

Abstract: Disclosed herein are system, method, and computer program product embodiments for publishing an embedded web application with atomic version control. An embodiment operates by generating an updated version of an embedded code in response to receiving a request to publish an updated embedded web application. The embodiment then generates an embedding code and an application configuration corresponding to the updated version of the embedded code in response to a determination that the embedded web application was published successfully. The embodiment then stores the embedding code and the application configuration.

Abstract: Media, methods, and systems are provided for scheduling a scheduled event within a synchronous multimedia collaboration session within a group-based communication system. A selected start time and a selected time duration may be received such that one or more users are added to the synchronous multimedia collaboration session within a channel of the group-based communication system at or near the selected start time. Upon expiration of the selected time duration, the one or more users may be automatically removed from the synchronous multimedia collaboration session to prevent the scheduled event from extending beyond an allocated time.

Abstract: Data field lifecycle management mechanisms. Custom metadata about a database object is generated. The custom metadata includes at least a specified name for the custom metadata type, a specified one or more fields to contain configuration information for the custom metadata type, and specification of at least one relationship field having fields as its domain relating the custom metadata type to a column or field of the database object stored in a database. One or more objects of the custom metadata type are maintained with referential integrity to provide metadata corresponding to the database object. The custom metadata objects maintain tenant-specific information. The one or more objects of the custom metadata type are updated automatically. A notification to one or more users is generated for one or more objects of the custom metadata type that cannot be updated automatically, if any.

Abstract: Methods and systems are provided for declaratively configuring a process and a page for a particular service provider. User interface(s) can be displayed at a user system and include options for declaratively configuring different log in processes and log in pages for the particular service provider. After receiving a selection of one of the options to configure the log in process and the log in page, inputs can be received that specify a type of identifiers associated with a user to be verified as part of the log in process, and an identity verification process to define how the user will be verified as part of the log in process for the service provider.

Abstract: Media, methods, and systems of presenting and assigning interactive user statuses within a group-based communication system. The interactive user statuses may include links to resources and/or actuatable controls for accessing collaboration activities with other users. The interactive user statuses may be assigned manually or automatically based on user activity within the group-based communication system or within external applications.

Abstract: A method receives a definition for an attribute that is associated with an asset. Information from the asset is received for the attribute. A name for the attribute is received where the name is used as a key in a key value pair for the attribute in a database. The method stores a key value pair for the attribute in the database using the key of the name. The value is associated with the information received from the asset that is monitoring the attribute. Access is provided to the value for the attribute using the key to monitor the attribute for the asset.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for implementing a dynamic chunk size for optimal batch processing. A system trains a machine learning model using historical data, the machine learning model having a plurality of weights, where each weight corresponds to one of a plurality of variables. The system determines a size of a subsequent data set. In addition, the system ascertains available resources. The system determines, using the machine learning model, an optimal batch size for the subsequent data set based, at least in part, on the available resources and the size of the subsequent data set. The system may then process the subsequent data set by performing parallel processing using the available resources according to the optimal batch size.

Abstract: Methods, systems, and devices supporting active fingerprinting for transport layer security (TLS) servers are described. In some systems, a client device may transmit a same set of client hello messages to each TLS server. The client device may receive a set of server hello messages in response to the standard set of client hello messages based on the contents of each client hello message. For example, a server hello message may indicate a selected cipher suite, TLS protocol version, and set of extensions in response to the specific information included in a client hello message. The client device may generate a hash value (e.g., a fuzzy hash) based on the set of server hello messages received from a TLS server. By comparing the hash values generated for different TLS servers, the client device may determine whether the TLS configurations for the different TLS servers are the same or different.

Abstract: A method for data processing that includes receiving an indication of a configuration for a first action of a communication process flow that controls electronic communications between a tenant of a multi-tenant system and a first set of users associated with the tenant. The method further includes associating, within a storage location associated with the tenant, a unique identifier with metadata that defines the configuration. The method further includes receiving a request to apply the configuration to a second action of a communication process flow that controls electronic communications between the tenant and a second set of users associated with the tenant. The request may indicate the unique identifier associated with the metadata. The method further includes retrieving the metadata from the storage location using the unique identifier indicated by the request. The method further includes applying the configuration to the second action using the retrieved metadata.

Abstract: A method and system for monitoring the status of a requested network action for a browser has been developed. The method first receives a network request for an action to execute a script with the browser. Network activities of the browser are then monitored to ensure no network activities are present that change a document object model (DOM) data. The browser is monitored to ensure no mutation of the DOM data is taking place. The script is monitored to ensure that it is not blocked in a viewport of the browser. The script is executed when it is determined that, no network activities of the browser are present, no mutation of the DOM data is taking place in the browser, and the script is not blocked in the viewport of the browser.

Abstract: Artificial intelligence (AI) technology can be used in combination with composable communication goal statements to facilitate a user's ability to quickly structure story outlines using “explanation” communication goals in a manner usable by an NLG narrative generation system without any need for the user to directly author computer code. This AI technology permits NLG systems to determine the appropriate content for inclusion in a narrative story about a data set in a manner that will satisfy a desired explanation communication goal such that the narratives will express various ideas that are deemed relevant to a given explanation communication goal.

Abstract: Systems, apparatuses, methods, and computer program products are provided for managing geographically distributed data storage in a group-based communication system. In some embodiments, an apparatus physically located in a first geographic area defined by a first geographic boundary is provided. In embodiments, upon determining that an entity identifier associated with a message is associated with a geographic data storage policy, the apparatus is configured to transmit a geographic data residency message package comprising message data of the message to a geographic data residency server physically located within a second geographic area defined by a second geographic boundary. The second geographic area is associated with the geographic data storage policy. In some embodiments, the apparatus is configured to update the message data of the message with residency token data received from the geographic data residency server.

Abstract: Systems, methods, and computer-readable media are provided for collaboration in a group-based communication system via a third-party integration. A new collaboration instance controller is initialized which allows the third-party integration to request and receive group-based communication system objects from the group-based communication system.

Abstract: Media, methods, and systems are disclosed for managing permissions for a collaborative document within a group-based communication system. A collaborative document may be created within a group-based communication system. When the collaborative document is created, permissions may be automatically assigned based on the context of collaborative document creation, such as which virtual space the collaborative document creation corresponds to. After creation, the collaborative document may be shared and permissions may be automatically updated based on the sharing context. Users without appropriate permissions will be prevented from accessing the document.

Abstract: Methods, systems, and apparatuses for programmatically managing email data integration between an external email resource associated with a group-based communication system user and a group-based communication system are provided herein.

Abstract: A method that includes receiving an input at an interactive conversation service that uses an intent classification model. The method may further include generating, using an encoder model of the intent classification model, a set of output vectors corresponding to the input, where the encoder model is configured to determine a set of metrics corresponding to intent classifications. The method may further include determining, using an outlier detection model of the intent classification model, whether the input is in-domain or out-of-domain (OOD) based on a first vector of the set of output vectors satisfying a domain threshold relative to one or more of the intent classifications. The method may further include outputting, by the intent classification model, a second vector of the set of output vectors that indicates the set of metrics corresponding to the intent classifications or an indication that the input is OOD.

Abstract: Media, methods, and systems are disclosed for documenting synchronous multimedia collaboration sessions in a group-based communication system. A live synchronous multimedia collaboration session is detected. In response to the detecting, a first audio segment is received and transcribed into a first text segment. A collaboration thread associated with the live synchronous multimedia collaboration session is generated. In real time, a first message is posted based on the first transcribed text segment to the collaboration thread associated with the live synchronous multimedia collaboration session. Next, a second audio segment is received and transcribed into a second text segment. Finally, in real time and during the live synchronous multimedia collaboration session, a second message is posted to the collaboration thread based on the second transcribed text segment.

Abstract: Techniques are disclosed relating to upgrade groups. A node of a computer system may access metadata assigned to the node during deployment of the node. The node may be one of a plurality of nodes associated with a service that is implemented by the computer system. The node may perform an operation on the metadata to derive a group identifier for the node and the group identifier may indicate the node's membership in one of a set of groups of nodes managed by the service. The node may then store the group identifier in a location accessible to the service.

Abstract: Techniques are disclosed relating to truncating a tenant's data from a table. A database node may maintain a multi-tenant table having records for tenants. Maintaining the table may include writing a record for a tenant into an in-memory cache and performing a flush operation to flush the record to a shared storage. The database node may write a truncate record into the in-memory cache that truncates a tenant from the table such that records of the tenant having a timestamp indicating a time before the truncate record cannot be accessed as part of a record query. While the truncate record remains in the in-memory cache, the database node may receive a request to perform a record query for a key of the tenant, make a determination on whether a record was committed for the key after the truncate record was committed, and return a response based on the determination.

Abstract: An indication to migrate requested data objects stored in a source database environment to a destination database environment is received. Some of data objects have many-to-one relationships with other data objects in the source database environment. At least one snapshot file generated by the source database environment is transferred to a destination database environment in bulk transfer mode. Subsequent incoming data received during bulk transfer mode, after the indication is stored in a temporary table. Upon completion of migration of the requested data objects the system transitions from bulk transfer mode to streaming mode. The subsequent incoming data from the temporary table is transferred to the destination database environment in response to the transition to streaming mode. Additional data received after the temporary table is empty is transferred from the source database environment to the destination database environment without use of the temporary table.

Abstract: Apparatus and method for identifying code path contributors to resource utilization spikes. For example, in some implementations, stack trace data and profiling data are sampled from a plurality of code paths of an application to generate a plurality of code path samples, where the sampling is performed across a series of temporal windows. Processor utilization data is also sampled across a corresponding series of temporal windows. Correlations are detected between the code path samples and occurrences of processor utilization spikes to generate correlational scores for the plurality of code paths. A ranking of code paths is then generated in accordance with the correlational scores in which code paths relatively higher in the ranking are more likely to contribute to the occurrences of the processor utilization spikes than code paths relatively lower in the ranking.

Abstract: A method for protecting against sensitive data disclosure includes receiving a user request to launch a web application in a web browser; loading code for the web application in the web browser; requesting session initialization from a web server; and receiving a dynamically and randomly generated URL map specific to a session from the web server, wherein the URL map identifies a plurality of randomly generated URL positions and for each URL position a randomly generated number of characters to skip. The method further includes modifying sensitive information associated with a URL in accordance with the URL map; transmitting the URL with the modified sensitive information to the web server; and receiving a requested data object from the web server, wherein the web server decoded the URL with the modified sensitive information to recover the sensitive information and used the decoded URL to access the data object.