Abstract: An example computing system includes a database disposed within a remote network management platform associated with a managed network that obtains service from a computing cluster that includes one or more worker nodes configured to execute containerized software applications using a containerized orchestration engine. The computing system also includes a computing device configured to identify a namespace associated with the containerized orchestration engine. The computing device is also configured to query a deployment configuration application programming interface (API) associated with a containerized application platform to obtain deployment configuration data. Further, the computing device is configured to query a build configuration API associated with the containerized application platform to obtain build configuration data.

Abstract: Example embodiments for identifying and displaying configuration item information are presented herein. A system may involve a proxy server application disposed within a managed network that includes configuration items and a server disposed within a remote network management platform managing the managed network. The server may receive a request to view information representative of a particular configuration item from a client device. Based on the request, the server may obtain the information and transmit a representation of a graphical user interface to the client device. The representation may include a health graphic, a relationship graphic, a timeline graphic, and an activity stream, each of which represent pertinent information about the particular configuration item. The representation may also include a tabbed interface that facilitates navigation between attributes corresponding to the particular configuration item and attributes corresponding to other configuration items in the managed network.

Abstract: An embodiment may involve a computational instance including persistent storage, the persistent storage containing representations of virtual machines previously discovered in a server cluster. The embodiment may also involve one or more processors configured to perform operations involving: (i) transmitting, to the server cluster, a request for an event log, the event log containing events related to virtual machines configured in the server cluster; (ii) receiving, from the server cluster, the event log; (iii) determining that the event log contains one or more significant events related to a particular virtual machine from virtual machines configured in the server cluster; (iv) performing a discovery pattern on the server cluster, wherein output from performing the discovery pattern includes a characterization of the particular virtual machine; and (v) causing an update to be written to the persistent storage, wherein the update includes the characterization of the particular virtual machine.

Abstract: A computing system may include a proxy server application and a database. The proxy server application may provide, to a computing device disposed within a managed network, instructions to identify one or more processes executing on the computing device. The proxy server application may also determine, for a process of the one or more processes, a file system path of a directory associated with the process and, based thereon, select one or more directories to scan for files associated with the process. The computing device may be provided with instructions to (i) scan the one or more directories and (ii) determine a plurality of attributes associated with one or more files discovered therein. The proxy server application may additionally receive results of the scan containing a representation of the plurality of attributes and store, in the database, the results of the scan.

Abstract: A computing system may include persistent storage disposed within a remote network management platform and a proxy software application disposed within a managed network that is associated with the remote network management platform.

Abstract: An embodiment includes executing a discovery pattern for the certificate authority, where the discovery pattern contains instructions for obtaining one or more digital certificates from the certificate authority; obtaining, from the certificate authority, a representation of a digital certificate acquired by a managed network from the certificate authority; storing, in a first set of mappings, a first new mapping between the certificate authority and the digital certificate; receiving, from a computing device disposed with the managed network, an indication that the digital certificate is installed on the computing device;, storing, in a second set of mappings, a second new mapping between the digital certificate and the computing device; determining that the digital certificate is expired; and storing, in a third set of mappings, a third new mapping between the digital certificate and a critical status indicator.

Abstract: A system may involve persistent storage containing a configuration management database (CMDB) and a non-CMDB table, wherein the CMDB contains configuration items that represent software, devices, or services deployed within a network, and wherein the non-CMDB table contains entries related to operation of the network. The system may also involve one or more processors configured to provide a representation of a graphical user interface (GUI), wherein the GUI contains a first selectable tab that displays classes of the configuration items, a second selectable tab that displays the non-CMDB table, and a canvas for visually depicting query expressions, wherein the classes are selectable to place class GUI elements thereof onto the canvas, wherein the non-CMDB table is selectable to place a table GUI element thereof onto the canvas, and wherein the table GUI element and a particular class GUI element are connectable by a link on the canvas.

Abstract: An example embodiment performed by a scoped software application executable on a computing device of a computational instance within a trust group of computational instances of a remote network management platform may involve obtaining a representation of one or more transactions involving the computational instance. The embodiment may also involve encrypting the representation, using a pre-shared key to which at least some computational instances within the trust group have access. The embodiment may also involve placing the encrypted representation into a data block that also includes: (i) a first output generated by applying a hash function to content from a previous data block of a blockchain-based transaction ledger, and (ii) a second output generated by applying the hash function to the encrypted representation and the first output. The embodiment may also involve distributing copies of the data block to blockchain-based transaction ledgers within each computational instance of the trust group.

Abstract: A computing system may include persistent storage disposed within a remote network management platform and a proxy software application disposed within a managed network that is associated with the remote network management platform.

Abstract: A system may involve persistent storage containing a configuration management database (CMDB) and a non-CMDB table, wherein the CMDB contains configuration items that represent software, devices, or services deployed within a network, and wherein the non-CMDB table contains entries related to operation of the network. The system may also involve one or more processors configured to provide a representation of a graphical user interface (GUI), wherein the GUI contains a first selectable tab that displays classes of the configuration items, a second selectable tab that displays the non-CMDB table, and a canvas for visually depicting query expressions, wherein the classes are selectable to place class GUI elements thereof onto the canvas, wherein the non-CMDB table is selectable to place a table GUI element thereof onto the canvas, and wherein the table GUI element and a particular class GUI element are connectable by a link on the canvas.

Abstract: An embodiment may involve a computational instance including persistent storage, the persistent storage containing representations of virtual machines previously discovered in a server cluster. The embodiment may also involve one or more processors configured to perform operations involving: (i) transmitting, to the server cluster, a request for an event log, the event log containing events related to virtual machines configured in the server cluster; (ii) receiving, from the server cluster, the event log; (iii) determining that the event log contains one or more significant events related to a particular virtual machine from virtual machines configured in the server cluster; (iv) performing a discovery pattern on the server cluster, wherein output from performing the discovery pattern includes a characterization of the particular virtual machine; and (v) causing an update to be written to the persistent storage, wherein the update includes the characterization of the particular virtual machine.

Abstract: A computing system may include persistent storage disposed within a remote network management platform and a proxy software application disposed within a managed network that is associated with the remote network management platform.

Abstract: A system may include a computational instance disposed within a remote network management platform and associated with a managed network, where the computational instance contains a configuration management database. The system may also include a software application disposed on a server device of the managed network and configured to perform operations comprising: obtaining, from the configuration management database, a list of directories, a list of file types, and a list of file names; remotely accessing a computing device of the managed network; for each respective directory in the list of directories, obtaining, from the computing device, information respectively related to discovered files that are: (i) disposed within the respective directory on the computing device, and (ii) specified by the list of file types or specified in the list of file names; and transmitting, to the configuration management database, the information related to the discovered files.

Abstract: Example embodiments for identifying and displaying configuration item information are presented herein. A system may involve a proxy server application disposed within a managed network that includes configuration items and a server disposed within a remote network management platform managing the managed network. The server may receive a request to view information representative of a particular configuration item from a client device. Based on the request, the server may obtain the information and transmit a representation of a graphical user interface to the client device. The representation may include a health graphic, a relationship graphic, a timeline graphic, and an activity stream, each of which represent pertinent information about the particular configuration item. The representation may also include a tabbed interface that facilitates navigation between attributes corresponding to the particular configuration item and attributes corresponding to other configuration items in the managed network.

Abstract: A computing system may include a proxy server application and a database. The proxy server application may provide, to a computing device disposed within a managed network, instructions to identify one or more processes executing on the computing device. The proxy server application may also determine, for a process of the one or more processes, a file system path of a directory associated with the process and, based thereon, select one or more directories to scan for files associated with the process. The computing device may be provided with instructions to (i) scan the one or more directories and (ii) determine a plurality of attributes associated with one or more files discovered therein. The proxy server application may additionally receive results of the scan containing a representation of the plurality of attributes and store, in the database, the results of the scan.

Abstract: An example embodiment may be performed by a software application executable on a computing device and may involve communicating with a server to access records of sessions between the server and computing devices of a managed network. The managed network may contain the server and a database associated with licensed software executable on the server. The database may store the records, and the records may include network addresses of the computing devices. The example embodiment may also involve: using a set of license misuse criteria to identify, within the records, (i) a set of the sessions that meets the set of criteria and (ii) a network address of a target device involved in the set of sessions; based on the network address of the target device, identifying the target device; and storing in memory an indication identifying the target device as a potential source of misuse of the licensed software.

Abstract: Provided herein are methodologies, systems, and devices for facilitating software discovery within a server environment using an enterprise-specific application identifier tag file. Such enterprise-specific application identifier tag files can be created for applications from various vendors and can include enterprise-specific information not known to an application vendor. Once created, the enterprise-specific application identifier tag file is deployed within the server environment, and may be saved on a database associated with the server environment. The application identifier tag files can include a link to their corresponding application files and can facilitate in application/software discovery by allowing a user to determine application information by performing an enterprise-specific application identifier tag file query.

Abstract: An example embodiment performed by a scoped software application executable on a computing device of a computational instance within a trust group of computational instances of a remote network management platform may involve obtaining a representation of one or more transactions involving the computational instance. The embodiment may also involve encrypting the representation, using a pre-shared key to which at least some computational instances within the trust group have access. The embodiment may also involve placing the encrypted representation into a data block that also includes: (i) a first output generated by applying a hash function to content from a previous data block of a blockchain-based transaction ledger, and (ii) a second output generated by applying the hash function to the encrypted representation and the first output. The embodiment may also involve distributing copies of the data block to blockchain-based transaction ledgers within each computational instance of the trust group.

Abstract: Provided herein are methodologies, systems, and devices for facilitating software discovery within a server environment using an enterprise-specific application identifier tag file. Such enterprise-specific application identifier tag files can be created for applications from various vendors and can include enterprise-specific information not known to an application vendor. Once created, the enterprise-specific application identifier tag file is deployed within the server environment, and may be saved on a database associated with the server environment. The application identifier tag files can include a link to their corresponding application files and can facilitate in application/software discovery by allowing a user to determine application information by performing an enterprise-specific application identifier tag file query.