Abstract: Some embodiments provide a method for displaying information about a data message. Through a graphical user interface (GUI) that provides a visualization of paths for a plurality of data messages in a network, the method receives a selection of a particular data message. In response to the selection, the method displays in the GUI (i) a set of characteristics of the selected data message, (ii) a path through a set of services of the network traversed by the selected data message, (iii) information regarding additional data messages sharing at least a subset of the set of characteristics of the selected data message, and (iv) information regarding one or more service rules applied to the data message at one or more of the services.

Abstract: Some embodiments provide a method that provides a visualization of data message paths through sets of services. For each data message of multiple data messages that traverse a network, the method identifies a set of services applied to the data messages within the network based on flow data collected from a set of network elements. The method generates an animated visualization of the data messages that includes representations of the services and paths the data messages take through the services. The method provides the generated visualization in a graphical user interface (GUI) to enable monitoring of data messages traversing the network via different service paths.

Abstract: Some embodiments provide a method for displaying a visualization of a middlebox rule. Through a graphical user interface (GUI) that provides a visualization of middlebox rules, the method receives a selection of a particular middlebox rule defined for a network. In response to the selection, the method displays in the GUI a visualization of the particular middlebox rule that includes (i) a first display area for providing GUI items representing a set of source groups to which the particular middlebox rule is applied, (ii) a second display area for providing GUI items representing a set of services to which the particular middlebox rule is applied, and (iii) a third display area for providing GUI items representing a set of destination groups to which the particular middlebox rule is applied.

Abstract: Some embodiments provide a method for presenting a visualization of a data message flow within a logical network that is implemented across multiple sites. The method receives flow tracing data regarding the data message flow from a source endpoint in a first site to a second endpoint in a second site. The data message flow is processed according to logical forwarding elements (LFEs) implemented in at least the first and second sites. For each of the sites through which the data message flow passes, the method identifies the LFEs that process the data message flow in the site. The method presents a visualization for the data message flow. The visualization includes a separate section for each site through which the data message flow passes. Each section indicates at least a subset of the LFEs that process the data message flow in the corresponding site for the section.

Abstract: Systems and methods are disclosed for updating network configuration documentation. In an example, a user can upload network configuration documentation with updates to a network to a server. The server can create an update topology corresponding to the documentation by identifying symbols that represent network components. The server can identify changes by comparing the update topology to a configuration data of an existing network. For example, the address of a gateway or the connections to the gateway can change. The server can cause the changes to be presented to a user, such as by highlighting the changes in a diagram. The user can confirm the changes, such as with a conversational workflow, and the server can save the changes to a database. The system can also send commands to the applicable network components to effectuate the confirmed changes.

Abstract: Systems and methods are disclosed for updating network configuration documentation. In an example, a user can upload network configuration documentation with updates to a network to a server. The server can create an update topology corresponding to the documentation by identifying symbols that represent network components. The server can identify changes by comparing the update topology to a configuration data of an existing network. For example, the address of a gateway or the connections to the gateway can change. The server can cause the changes to be presented to a user, such as by highlighting the changes in a diagram. The user can confirm the changes, such as with a conversational workflow, and the server can save the changes to a database. The system can also send commands to the applicable network components to effectuate the confirmed changes.

Abstract: Some embodiments provide a method for presenting a visualization of a data message flow within a logical network that is implemented across multiple sites. The method receives flow tracing data regarding the data message flow from a source endpoint in a first site to a second endpoint in a second site. The data message flow is processed according to logical forwarding elements (LFEs) implemented in at least the first and second sites. For each of the sites through which the data message flow passes, the method identifies the LFEs that process the data message flow in the site. The method presents a visualization for the data message flow. The visualization includes a separate section for each site through which the data message flow passes. Each section indicates at least a subset of the LFEs that process the data message flow in the corresponding site for the section.

Abstract: Some embodiments provide a method for presenting a visualization of a data message flow within a logical network that is implemented across multiple sites. The method receives flow tracing data regarding the data message flow from a source endpoint in a first site to a second endpoint in a second site. The data message flow is processed according to logical forwarding elements (LFEs) implemented in at least the first and second sites. For each of the sites through which the data message flow passes, the method identifies the LFEs that process the data message flow in the site. The method presents a visualization for the data message flow. The visualization includes a separate section for each site through which the data message flow passes. Each section indicates at least a subset of the LFEs that process the data message flow in the corresponding site for the section.