Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Systems and methods are disclosed for updating network configuration documentation. In an example, a user can upload network configuration documentation with updates to a network to a server. The server can create an update topology corresponding to the documentation by identifying symbols that represent network components. The server can identify changes by comparing the update topology to a configuration data of an existing network. For example, the address of a gateway or the connections to the gateway can change. The server can cause the changes to be presented to a user, such as by highlighting the changes in a diagram. The user can confirm the changes, such as with a conversational workflow, and the server can save the changes to a database. The system can also send commands to the applicable network components to effectuate the confirmed changes.

Abstract: Some embodiments provide a method for presenting a visualization of a topology for a logical network. In response to receiving a selection of a particular user interface (UI) item representing a particular group of logical elements, the method presents one or more filter UI items for the particular group of logical elements. Each filter UI item corresponds to a different attribute associated with the logical elements. Upon receiving selection of one or more attribute states for each attribute for which a filter UI item is presented, the method identifies logical elements in the group of logical elements that match the selected attribute states. The method presents, in the UI, an expanded version of the particular group of logical elements that emphasizes the identified logical elements that match the selected attribute states.

Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Systems and methods are disclosed for updating network configuration documentation. In an example, a user can upload network configuration documentation with updates to a network to a server. The server can create an update topology corresponding to the documentation by identifying symbols that represent network components. The server can identify changes by comparing the update topology to a configuration data of an existing network. For example, the address of a gateway or the connections to the gateway can change. The server can cause the changes to be presented to a user, such as by highlighting the changes in a diagram. The user can confirm the changes, such as with a conversational workflow, and the server can save the changes to a database. The system can also send commands to the applicable network components to effectuate the confirmed changes.

Abstract: Some embodiments provide a method for presenting a visualization of a topology for a logical network. In response to receiving a selection of a particular user interface (UI) item representing a particular group of logical elements, the method presents one or more filter UI items for the particular group of logical elements. Each filter UI item corresponds to a different attribute associated with the logical elements. Upon receiving selection of one or more attribute states for each attribute for which a filter UI item is presented, the method identifies logical elements in the group of logical elements that match the selected attribute states. The method presents, in the UI, an expanded version of the particular group of logical elements that emphasizes the identified logical elements that match the selected attribute states.

Abstract: Some embodiments provide a method for defining security groups in a network. In a user interface, the method displays (i) a set of existing security groups and (ii) a set of recommend security groups based on monitored network flows in the network. Each existing security group and recommended security group includes at least one data compute node (DCN). The method provides a user interface tool for (i) accepting recommended security groups to be part of the set of existing security groups and (ii) adding DCNs from the recommended security groups to the existing security groups. Security rules are defined and implemented in the network for DCNs belonging to existing security groups.

Abstract: Examples herein include systems and methods for processing natural language queries across database platforms. An example method can include storing relational graphs representing relational paths between resources, such as by using nodes and edges. When a user inputs a query in natural language format, the method can identify and extract a matching intent and entity using a natural language understanding tool trained with an automated script. The method can include fetching a relational path and formatting it as an ordered list of nodes and edges. The list can be translated into a framework specific to a first database relevant to the query to obtain a translated path. The translated path can be used to execute the query at the database. Returned results can be displayed as a list of objects on a GUI.

Abstract: Some embodiments provide a method for presenting a visualization of a topology for a logical network. In response to receiving a selection of a particular user interface (UI) item representing a particular group of logical elements, the method presents one or more filter UI items for the particular group of logical elements. Each filter UI item corresponds to a different attribute associated with the logical elements. Upon receiving selection of one or more attribute states for each attribute for which a filter UI item is presented, the method identifies logical elements in the group of logical elements that match the selected attribute states. The method presents, in the UI, an expanded version of the particular group of logical elements that emphasizes the identified logical elements that match the selected attribute states.

Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Some embodiments provide a method for visualizing network flows between multiple security groups in a network. Each security group includes a set of one or more data computer nodes (DCNs). The method receives data regarding network flows between the DCNs of the security groups. In a scalable user interface visualization, the method displays the network flows by aggregating the network flows between DCNs in pairs of security groups. The method provides a filtering tool to enable visualization in the user interface of specific flows between the DCNs of the plurality of security groups.

Abstract: Some embodiments provide a method for defining security groups in a network. In a user interface, the method displays (i) a set of existing security groups and (ii) a set of recommend security groups based on monitored network flows in the network. Each existing security group and recommended security group includes at least one data compute node (DCN). The method provides a user interface tool for (i) accepting recommended security groups to be part of the set of existing security groups and (ii) adding DCNs from the recommended security groups to the existing security groups. Security rules are defined and implemented in the network for DCNs belonging to existing security groups.

Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Some embodiments provide a method for displaying a multi-layer network map for a network configured in at least one datacenter. The method displays a visualization of a first layer of the multi-layer network map. The visualization includes a first set of selectable items corresponding to components of the network and connections between the components. At least a subset of the first set of selectable items link to other layers of the network map. The method receives input selecting one of the selectable items. In response to the input, the method displays a visualization of a second layer of the network map. The second layer provides information about the network configuration at a different level of detail than the first layer. The visualization of the second layer includes a second set of selectable items corresponding to components of the network and connections between the components.

Abstract: Some embodiments provide a method for generating a multi-layer network map from network configuration data. The method receives network configuration data that defines network components and connections between the network components for a network that spans one or more datacenters. Based on the received network configuration data, the method generates multiple data layers for a multi-layer interactive map of the network. Different data layers include different network components and connections. The method generates a visual representation of the network for each data layer. Each visual representation includes a map of the network at a different level of hierarchy.

Abstract: Some embodiments provide a method for displaying a multi-layer network map for a network configured in at least one datacenter. The method displays a visualization of a first layer of the multi-layer network map. The visualization includes a first set of selectable items corresponding to components of the network and connections between the components. At least a subset of the first set of selectable items link to other layers of the network map. The method receives input selecting one of the selectable items. In response to the input, the method displays a visualization of a second layer of the network map. The second layer provides information about the network configuration at a different level of detail than the first layer. The visualization of the second layer includes a second set of selectable items corresponding to components of the network and connections between the components.