Abstract: Disclosed herein are embodiments of systems, methods, and products comprises a server for monitoring and tracking user activities based on different events in a security log. The server may retrieve the security log and parse the security log to identify a set of predetermined events for a user based on the event IDs, including logon events, logoff events, and privileged events. Based on the time point when privileged events occur at least partially during the pattern of having more logon events than logoff events, the server may determine when the user starts to work. Based on the time point when the logoff events and logon event starts to show the pattern that there are more logoff events than logon events and the difference increasing into a threshold, the server may determine when the user stops working. The server may generate a heat map indicating different users' work time length.

Abstract: Dynamic content can be delivered via email. Email messages include HTML content with one or more hyperlinks referring to a network-connected dynamic content server. The hyperlinks are accessed upon rendering of the email on a client device, triggering a request to a dynamic content server. The dynamic content server determines a content item to be served in response to the request. The dynamic content item determination may be based on factors including the identity of the requester, the email communication in which the hyperlink is embedded, recent activities or behavior on the part of the requester, and/or known preference or demographic information associated with the requester. The request can be directed to a selected content item stored within a content delivery network, for transmission back to the requester and display to the user within the email.

Abstract: A device for facilitating event processing is presented. The device includes a transceiver, one or more memories including an event processing model, and one or more processors. The processors retrieve a new event from an application programming interface (API). The processors then parse the new event to determine a parsed event and store the parsed event in the memories. After determining the presence or absence of an additional new event via the API, the processors transmit a notification for display to a user indicating the parsed event and prompting a user to process the parsed event, resulting in either a successful or a failure processing signal. Responsive to receiving a failure processing signal, the processors schedule a subsequent notification for transmission to the user device according to an event processing model by using an exponential back-off and a random jitter.

Abstract: Certain aspects of the present disclosure relate to methods and systems for optimized delivery of communications including content to users of a software application. The method also includes obtaining, by a customer engagement platform (CEP), a set of cohort selection criteria for identifying a user cohort to deliver the content; identifying, by a data analytics platform (DAP), the user cohort to communicate with in accordance with the set of cohort selection criteria; identifying, by the DAP, one or more communication configurations for communicating with one or more sub-groups within the user cohort; and to each user of the user cohort, transmitting one or more communications based on the content and a corresponding communication configuration for a sub-group that may include the corresponding user; and measuring engagement outcomes associated with usage of the corresponding one or more communication configurations in communication with each of the sub-groups.

Abstract: Systems and methods for capturing and monitoring the health, safety, and/or activity of a user are described. In one aspect, the system generates a data usage pattern for the user and monitors the user's current data usage activity to detect data usage deviations from the user's usage pattern. When a deviation is detected, the system may send an alert message to the user or another user indicating that an anomaly may have occurred, permitting the user or another user to respond to the anomaly.

Abstract: Examples disclosed herein relate to tracking a usage metric for each of a plurality of communication assets, determining whether the usage metric fails to meet a threshold for each of the plurality of communication assets, and in response to determining that the usage metric fails to meet the threshold for at least one of the plurality of communication assets, causing the at least one of the plurality of communication assets to be disabled.

Abstract: Systems and methods for are provided for offloading computing tasks from constrained devices. An example apparatus includes an offload computing protocol (OCP) enabled device. The OCP enabled device includes OCP extensions to the operating system to enable the offloading of computing tasks. A proximity locator may use a radio transceiver to locate an OCP device that can accept a computing task. The OCP enabled device may include an OCP bundle comprising code and data, wherein the OCP bundle is to be sent to the OCP device.

Abstract: An example computing system includes one or more processing units implemented in circuitry and configured to: process an intent for configuration of a plurality of managed network devices, the intent representing authorization of access to capabilities of applications accessible to users of the managed network devices according to roles assigned to the users; receive advertised capabilities from a new application accessible to the users; receive a request for authorization to one of the capabilities of the new application from one of the users; determine one of the roles assigned to the one of the users; determine whether the intent grants authorization to the one of the capabilities according to the one of the roles; and grant the one of the users access to the one of the capabilities when the intent grants authorization to the one of the capabilities according to the one of the roles.

Abstract: A management device includes a receiving unit that receives a link request to link a user ID of a user from a link origin, and a control unit that, in response the link request, requests the user to input unique information of the link origin, and does not execute a linking of the user ID in a case in which the unique information input from the user is incorrect.

Abstract: This document discloses techniques, apparatuses, and systems for inter-service communication management to manage inter-service communication between a server-side service and a client-side service. The inter-service management system may comprise memory and a controller configured to perform the inter-service communication management. In aspects, a configuration file may be used to obtain information specifying a first inter-service communication mechanism for communicating one or more messages between the client-side and server-side services. The inter-service communication management system may instantiate a stub associated with the inter-service communication mechanism information, which can be used to communicate a message from the server-side service to a proxy that interacts with the client-side service. The message may then be forwarded from the proxy to the client-side service to enable inter-service communication between the server-side service and the client-side service.

Abstract: Systems and methods for non-human account tracking are disclosed. According to one embodiment, a method may include: retrieving, by a tracing tool computer program executed by a computer processor, a plurality of records for a computer application from an application database, the plurality of records comprising a computer application name, one or more Application Programming Interfaces (APIs) associated with the computer application, and an identification of a plurality of non-human accounts that have access to the computer application; storing, by the tracing tool computer program, the plurality of records as raw data in a relational database; determining, by the tracing tool computer program, that each of the retrieved plurality of non-human accounts is in an account vault; associating, by the tracing tool computer program, the non-human accounts with the retrieved one or more APIs; and storing, by the tracing tool computer program, the association in a relational database.

Abstract: Implementations selectively message member account data to client applications to reduce server load. When a monitored load on cloud servers meets a criteria, a hold status may be triggered. During the hold status, member accounts may be monitored and client applications may be transmitted push messages, for example when a change is detected in a member's monitored account. The push messages can contain the detected changes, such as a posted transaction that triggered the message. Implementations of the client application can be configured to display local data (stored from the push messages) during the hold status in response to a member's request to access/view their account. Because server to client communication is limited to messages that contain member account changes, an overall server load can be reduced.

Abstract: A resource allocation server including memory circuitry, processor circuitry, and an interface. The resource allocation server is configured to communicate with a plurality of resource allocation servers including a first resource allocation server of a first network. The resource allocation server is configured to receive, from a requester, a first resource allocation request indicative of a resource type. The resource allocation server is configured to negotiate, with the first resource allocation server, an allocation of a resource based on the resource type indicated in the first resource allocation request. The resource allocation server is part of a network different from the first network.

Abstract: Techniques for heterogenous video editing across storage platforms are disclosed, including: mapping a first mount in a local system to a first location in a first type of storage system, the first location including a first representation of the media object; mapping a second mount in the local system to a second location in a second type of file system, the second location including a second representation of the media object that is timecode-aligned with the first representation of the media object, the second representation being different from the first representation; and providing the first mount in the local system and the second mount in the local system to the media editing application, to enable the media editing application to switch between the first representation of the media object and the second representation of the media object via the local system.

Abstract: An embodiment includes storage containing configuration and operational data related to a managed network, an action configurator application, and an action execution application. The embodiment also includes one or more processors configured to: receive, by way of the action configurator application, a specification of an action type; receive, by way of the action configurator application, a specification of an input source for actions generated using the action type; receive, by way of the action configurator application, a specification of one or more target users and an output modality for the actions; receive, by way of the action configurator application, a specification of a condition that causes the actions to be generated; determine, that the condition has been satisfied; and cause the action execution application to execute the action generator on the input source, and produce an output for one of the target users by way of the output modality.

Abstract: A logical routing element (LRE) having multiple designated instances for routing packets from physical hosts (PH) to a logical network is provided. A PH in a network segment with multiple designated instances can choose among the multiple designated instances for sending network traffic to other network nodes in the logical network according to a load balancing algorithm. Each logical interface (LIF) of an LRE is defined to be addressable by multiple identifiers or addresses, and each LIF identifier or address is assigned to a different designated instance.

Abstract: Dynamically scaling control plane for ingress services for large numbers of applications with minimal traffic disruption includes receiving an estimate of a number of applications to be executed by multiple clusters implemented by an orchestrator platform. Each cluster includes multiple containers. The multiple clusters implement a centralized controller that control execution of the applications by the multiple clusters. The centralized controller is sharded into a variable number of controllers that collectively control the estimated number of applications based on the estimate of the number of applications and a pre-determined number of applications that each controller can control. Each controller of the variable number of controllers controls an execution of a respective subset of the applications. In response to a change in the number of applications over time, the number of controllers is modified based on a number of applications to be executed by the multiple clusters at any given time.

Abstract: Secure cloud-based storage system management that includes: establishing, within a cloud-based services provider and based on one or more user credentials, a cloud-based user session to execute one or more commands on a remote storage system that includes physical storage devices; extending, based on using an access token based on the one or more user credentials to securely issue the one or more data storage operations to the remote storage system, the cloud-based user session to the remote storage system.

Abstract: In some embodiments, infrastructure data and service data is received for a computing infrastructure. The infrastructure data indicates resources in the computing infrastructure, and the service data indicates services to be orchestrated across the computing infrastructure. An infrastructure capacity model is generated, which indicates a capacity of the computing infrastructure over a particular time window. Service-to-resource placement options are also identified, which indicate possible placements of the services across the resources over the particular time window. Resource inventory data is obtained, which indicates an inventory of resources that are available to add to the computing infrastructure during the particular time window. An infrastructure capacity plan is then generated, which indicates resource capacity allocation options over the time slots of the particular time window. Resource capacities for the services are then allocated in the computing infrastructure.

Abstract: A visual bot designer displays a user interface that has a visual authoring canvas and a property pane. It can also have a serialized file display pane. A user can provide authoring inputs on any of the user interfaces, and the visual bot designer computing system generates and displays updates on the other parts of the user interface.