Abstract: Techniques and configurations for data management are described. Features may be extracted from backup data stored in a data management system for a target object, where the backup data may reflect the target object at a point-in-time. An anomaly associated with the target object may be detected based on the features extracted from the backup data. Based on detecting the anomaly, a malware identity associated with the anomaly may be identified based on the features extracted from the backup data. The identified malware identity may be indicated via a user interface.

Abstract: A storage appliance may be configured to perform a method to evaluate a failover procedure. The method may include receiving a trigger indication to perform a test failover procedure for a plurality of virtual machines and identifying, based on receiving the trigger indication, a set of procedures for performing a full failover procedure on a target system based at least in part on a recovery configuration for the plurality of virtual machines. The method may include selecting a subset of test procedures of the set of procedures, causing execution on the target system of the subset of test procedures on a subset of virtual machines of the plurality of virtual machines, and calculating, based at least in part on the execution of the subset of test procedures on the subset of virtual machines, a success metric associated with the full failover procedure for the plurality of virtual machines.

Abstract: The present disclosure is directed towards systems and methods of detecting a cause of anomalous load balancing among a plurality of servers. A device intermediary to a plurality of clients and a plurality of servers collects values of a plurality of counters. The device identifies a server of the plurality of servers that is an outlier. The device can identify a counter of the plurality of counters that is an outlier based on at least a comparison of values of each of the plurality of counters for each of the plurality of servers. The device can provide, responsive to the determination, an indication that a value of the counter is a factor causing the server to have uneven load balancing during the time interval.

Abstract: A data management platform may group a first instance of a set of virtual machines into a backup group for performing a backup of data from a source data storage environment to a target data storage environment in accordance with a backup configuration. The data management platform may receive, from a user, an input to create a second instance of the set of virtual machines at the target data storage environment. In some examples, data backed up to the target data storage environment from the first instance may be configured as a source for the second instance. The data management platform may instantiate, in response to receiving the input, the second instance of the set of virtual machines using the backup configuration for the first instance of the set of virtual machines and the data backed up to the target data storage environment.

Abstract: A method of managing a virtual machine environment is described. According to the method, a cloud application that is used for management of a plurality of virtual machines may receive, from a first virtual machine, an indication of one or more configuration parameters associated with the first virtual machine. The cloud application may generate an executable package based on metadata associated with the first virtual machine. The executable package may be configured to be executable by a set of default drivers on a second virtual machine upon bootup of the second virtual machine to configure the second virtual machine in accordance with the one or more configuration parameters. The cloud application may transmit, to the second virtual machine, the executable package for configuring the second virtual machine in accordance with the one or more configuration parameters.

Abstract: A storage appliance may be configured to perform a method to evaluate a failover procedure. The method may include receiving a trigger indication to perform a test failover procedure for a plurality of virtual machines and identifying, based on receiving the trigger indication, a set of procedures for performing a full failover procedure on a target system based at least in part on a recovery configuration for the plurality of virtual machines. The method may include selecting a subset of test procedures of the set of procedures, causing execution on the target system of the subset of test procedures on a subset of virtual machines of the plurality of virtual machines, and calculating, based at least in part on the execution of the subset of test procedures on the subset of virtual machines, a success metric associated with the full failover procedure for the plurality of virtual machines.

Abstract: Techniques for data management at a data management system are described. Characteristics for a set of computing objects managed by a computing system may be determined. The characteristics determined for the set of computing objects may be used to group the computing objects into groups. Based on grouping the computing objects, instructions for recovering the computing objects may be generated. The instructions may be provided to a user as a suggestion. Based on receiving a selection of the suggested instructions, the suggested instructions may be configured for a recovery of the computing objects of the computing system.

Abstract: A storage appliance may be configured to perform a method to evaluate a failover procedure. The method may include receiving a trigger indication to perform a test failover procedure for a plurality of virtual machines and identifying, based on receiving the trigger indication, a set of procedures for performing a full failover procedure on a target system based at least in part on a recovery configuration for the plurality of virtual machines. The method may include selecting a subset of test procedures of the set of procedures, causing execution on the target system of the subset of test procedures on a subset of virtual machines of the plurality of virtual machines, and calculating, based at least in part on the execution of the subset of test procedures on the subset of virtual machines, a success metric associated with the full failover procedure for the plurality of virtual machines.

Abstract: A method of managing a virtual machine environment is described. According to the method, a cloud application that is used for management of a plurality of virtual machines may receive, from a first virtual machine, an indication of one or more configuration parameters associated with the first virtual machine. The cloud application may generate an executable package based on metadata associated with the first virtual machine. The executable package may be configured to be executable by a set of default drivers on a second virtual machine upon bootup of the second virtual machine to configure the second virtual machine in accordance with the one or more configuration parameters. The cloud application may transmit, to the second virtual machine, the executable package for configuring the second virtual machine in accordance with the one or more configuration parameters.

Abstract: Described embodiments provide systems and methods for detecting outliers on a series of data. A device receives a plurality of data points and adds a received data point to a first window of data comprising at least a predetermined number of received data points from the plurality of data points, responsive to detecting that the received data point is not an outlier from the first window of data. The device detects that one or more next data points of the received plurality of data points are outliers from the first window of data and determines that a count of the one or more next data points that are outliers exceeds a predetermined threshold. In response, the device establishes a replacement window of data.

Abstract: The present disclosure is directed towards systems and methods of detecting a cause of anomalous load balancing among a plurality of servers. A device intermediary to a plurality of clients and a plurality of servers collects values of a plurality of counters. The device identifies a server of the plurality of servers that is an outlier. The device can identify a counter of the plurality of counters that is an outlier based on at least a comparison of values of each of the plurality of counters for each of the plurality of servers. The device can provide, responsive to the determination, an indication that a value of the counter is a factor causing the server to have uneven load balancing during the time interval.

Abstract: The present disclosure is directed towards systems and methods of detecting a cause of anomalous load balancing among a plurality of servers. A device intermediary to a plurality of clients and a plurality of servers collects values of a plurality of counters. The device identifies a server of the plurality of servers that is an outlier. The device can identify a counter of the plurality of counters that is an outlier based on at least a comparison of values of each of the plurality of counters for each of the plurality of servers. The device can provide, responsive to the determination, an indication that a value of the counter is a factor causing the server to have uneven load balancing during the time interval.

Abstract: Described embodiments provide systems and methods for detecting outliers on a series of data. A device receives a plurality of data points and adds a received data point to a first window of data comprising at least a predetermined number of received data points from the plurality of data points, responsive to detecting that the received data point is not an outlier from the first window of data. The device detects that one or more next data points of the received plurality of data points are outliers from the first window of data and determines that a count of the one or more next data points that are outliers exceeds a predetermined threshold. In response, the device establishes a replacement window of data.

Abstract: Described embodiments provide systems and methods for detecting outliers on a series of data. A device receives a plurality of data points and adds a received data point to a first window of data comprising at least a predetermined number of received data points from the plurality of data points, responsive to detecting that the received data point is not an outlier from the first window of data. The device detects that one or more next data points of the received plurality of data points are outliers from the first window of data and determines that a count of the one or more next data points that are outliers exceeds a predetermined threshold. In response, the device establishes a replacement window of data.

Abstract: Described embodiments provide systems and methods for detecting outliers on a series of data. A device receives a plurality of data points and adds a received data point to a first window of data comprising at least a predetermined number of received data points from the plurality of data points, responsive to detecting that the received data point is not an outlier from the first window of data. The device detects that one or more next data points of the received plurality of data points are outliers from the first window of data and determines that a count of the one or more next data points that are outliers exceeds a predetermined threshold. In response, the device establishes a replacement window of data.

Abstract: The present disclosure is directed towards systems and methods of detecting a cause of anomalous load balancing among a plurality of servers. A device intermediary to a plurality of clients and a plurality of servers collects values of a plurality of counters. The device identifies a server of the plurality of servers that is an outlier. The device can identify a counter of the plurality of counters that is an outlier based on at least a comparison of values of each of the plurality of counters for each of the plurality of servers. The device can provide, responsive to the determination, an indication that a value of the counter is a factor causing the server to have uneven load balancing during the time interval.

Abstract: The present solution is directed to systems and methods for providing, by a device intermediary to a plurality of clients and one or more servers, analytics on a stream of network packets traversing the device. The systems and methods include the device identifying, while the device manages network traffic between the plurality of clients and the one or more servers, a stream of network packets, from a plurality of streams of network packets of the network traffic traversing the device, corresponding to a flow identifier, e.g., a selected one of an internet protocol address, a uniform resource locator or an application identifier. The systems and methods may include a collector of the analytics engine collecting, while the device manages network traffic, metrics on the identified stream of network packets and generating one or more stream objects that comprise the collected metrics.

Abstract: The present solution is directed to systems and methods for providing, by a device intermediary to a plurality of clients and one or more servers, analytics on a stream of network packets traversing the device. The systems and methods include the device identifying, while the device manages network traffic between the plurality of clients and the one or more servers, a stream of network packets, from a plurality of streams of network packets of the network traffic traversing the device, corresponding to a flow identifier, e.g., a selected one of an internet protocol address, a uniform resource locator or an application identifier. The systems and methods may include a collector of the analytics engine collecting, while the device manages network traffic, metrics on the identified stream of network packets and generating one or more stream objects that comprise the collected metrics.

Abstract: The present solution is directed to systems and methods for providing, by a device intermediary to a plurality of clients and one or more servers, analytics on a stream of network packets traversing the device. The systems and methods include the device identifying, while the device manages network traffic between the plurality of clients and the one or more servers, a stream of network packets, from a plurality of streams of network packets of the network traffic traversing the device, corresponding to a flow identifier, e.g., a selected one of an internet protocol address, a uniform resource locator or an application identifier. The systems and methods may include a collector of the analytics engine collecting, while the device manages network traffic, metrics on the identified stream of network packets and generating one or more stream objects that comprise the collected metrics.