Abstract: Exemplary systems and methods are directed to risk-based observability of a platform. Data is received from plural devices from one or more computing environments on a network. The received data is in a raw data format according to the computing environment or platform from which it was received. The received data is converted from the raw format to a structured format. The converted data is enhanced by adding contextual information associated with a corresponding one of the plural devices. A risk analysis is performed on the enhanced data based on one or more risk detection rules applied to the network. One or more tags are applied to the enhanced data based on results of the risk analysis. Data analysis is performed on the enhanced data to identify devices from aggregate sources. The data is sent to one or more destinations on the network based on the applied tags.

Abstract: A processing device receives a request to include a custom action in a processing definition. The custom action is to be performed in response to an occurrence of an infrastructure event in a third party infrastructure platform. The processing device selects the processing definition that specifies a default action to be performed in response to the occurrence of the infrastructure event. The default action being defined by an infrastructure management platform managing the third party infrastructure platform. The processing device receives, from the third party infrastructure platform, user input defining the custom action relative to the default action in the processing definition and changes the processing definition to include the custom action relative to the default action.

Abstract: A processing device receives event notifications for occurrences of infrastructure events from a different event sources. The event notifications have different formats to represent a same type of infrastructure event. The processing device creates uniform event notifications from a base event format for the event notifications, and provides the uniform event notifications to a centralized event handler that corresponds to the base event format within a threshold amount of time to allow a time sensitive action to be performed by the centralized event handler within a time period.

Abstract: A processing device receives a request to include a custom action in a processing definition. The custom action is to be performed in response to an occurrence of an infrastructure event in a third party infrastructure platform. The processing device selects the processing definition that specifies a default action to be performed in response to the occurrence of the infrastructure event. The default action being defined by an infrastructure management platform managing the third party infrastructure platform. The processing device receives, from the third party infrastructure platform, user input defining the custom action relative to the default action in the processing definition and changes the processing definition to include the custom action relative to the default action.

Abstract: A processing device receives a request to include a custom action in a processing definition. The custom action is to be performed in response to an occurrence of an infrastructure event in a third party infrastructure platform. The processing device selects the processing definition that specifies a default action to be performed in response to the occurrence of the infrastructure event. The default action being defined by an infrastructure management platform managing the third party infrastructure platform. The processing device receives, from the third party infrastructure platform, user input defining the custom action relative to the default action in the processing definition and changes the processing definition to include the custom action relative to the action.

Abstract: A processing device receives a request to include a custom action in a processing definition. The custom action is to be performed in response to an occurrence of an infrastructure event in a third party infrastructure platform. The processing device selects the processing definition that specifies a default action to be performed in response to the occurrence of the infrastructure event. The default action being defined by an infrastructure management platform managing the third party infrastructure platform.

Abstract: A processing device receives event notifications for occurrences of infrastructure events from a different event sources. The event notifications have different formats to represent a same type of infrastructure event. The processing device creates uniform event notifications from a base event format for the event notifications, and provides the uniform event notifications to a centralized event handler that corresponds to the base event format within a threshold amount of time to allow a time sensitive action to be performed by the centralized event handler within a time period.

Abstract: Methods and apparatus for storing and transmitting historical configuration data associated with information technology assets are disclosed. The system reads and stores a first version of data with a timestamp. The system then performs a local update by reading a second version of data with a timestamp, replacing the first set of data and timestamp, and storing the changes between the first and second versions of data. The system also may receive update requests from a remote location for the latest version of data. The changes between versions of data are sent to the remote location, where the changes between versions of data are stored and are usable to create the requested latest version of data and/or prior versions of data.

Abstract: Methods and apparatus for storing and transmitting historical configuration data associated with information technology assets are disclosed. The system reads and stores a first version of data with a timestamp. The system then performs a local update by reading a second version of data with a timestamp, replacing the first set of data and timestamp, and storing the changes between the first and second versions of data. The system also may receive update requests from a remote location for the latest version of data. The changes between versions of data are sent to the remote location, where the changes between versions of data are stored and are usable to create the requested latest version of data and/or prior versions of data.

Abstract: Methods and apparatus for storing and transmitting historical configuration data associated with information technology assets are disclosed. The system reads and stores a first version of data with a timestamp. The system then performs a local update by reading a second version of data with a timestamp, replacing the first set of data and timestamp, and storing the changes between the first and second versions of data. The system also may receive update requests from a remote location for the latest version of data. The changes between versions of data are sent to the remote location, where the changes between versions of data are stored and are usable to create the requested latest version of data and/or prior versions of data.

Abstract: Methods and apparatus for storing and transmitting historical configuration data associated with information technology assets are disclosed. The system reads and stores a first version of data with a timestamp. The system then performs a local update by reading a second version of data with a timestamp, replacing the first set of data and timestamp, and storing the changes between the first and second versions of data. The system also may receive update requests from a remote location for the latest version of data. The changes between versions of data are sent to the remote location, where the changes between versions of data are stored and are usable to create the requested latest version of data and/or prior versions of data.

Abstract: Methods and apparatus for storing and transmitting historical configuration data associated with information technology assets are disclosed. The system reads and stores a first version of data with a timestamp. The system then performs a local update by reading a second version of data with a timestamp, replacing the first set of data and timestamp, and storing the changes between the first and second versions of data. The system also may receive update requests from a remote location for the latest version of data. The changes between versions of data are sent to the remote location, where the changes between versions of data are stored and are usable to create the requested latest version of data and/or prior versions of data.

Abstract: Methods and apparatus for storing and transmitting historical configuration data associated with information technology assets are disclosed. The system reads and stores a first version of data with a timestamp. The system then performs a local update by reading a second version of data with a timestamp, replacing the first set of data and timestamp, and storing the changes between the first and second versions of data. The system also may receive update requests from a remote location for the latest version of data. The changes between versions of data are sent to the remote location, where the changes between versions of data are stored and are usable to create the requested latest version of data and/or prior versions of data.