Abstract: Systems, methods, and media are presented that are used to recompute a service model to match data in a configuration management database. Recomputing includes detecting a change to a configuration item in a configuration management database and marking a recomputing environment indicating a recomputing environment to be recomputed based on the change. Using a recomputation job, a service environment database is queried and a response is received from the service environment indicating at least the recomputing environment. The recomputation job then recomputes the service environment to match a service model to the change in the configuration management database.

Abstract: Systems and methods for mapping configuration items to business functions within a corporate infrastructure are disclosed. Discovery processes to automatically create and update service maps may introduce an artificial dependency between configuration items that is not necessary to the business function represented in the service map. These unnecessary dependencies may be considered “noise” and unnecessarily complicate the service map. Using machine learning techniques and procedures to identify short lived connections embodiments in accordance with this disclosure, dependency connections that may be considered noise may be detected and flagged. Once detected, these connections may be automatically removed from the service map to improve its accuracy and usefulness. Additionally, a user interface is provided that explains the “reason codes” for identification of noise connections.

Abstract: Systems and methods for generating a graphical display region including a synchronized display of alert data and impact data indicative of conditions of a computing infrastructure are herein disclosed as comprising, in an implementation, identifying alerts, each alert having a timestamp indicative of a first time at which it was identified, performing an impact calculation to generate the impact data based on alerts valid as of a second time proximate to an impact calculation start time, and generating a graphical display region including impact data valid as of a display time and alert data indicative of the alerts valid as of the second time.

Abstract: An example embodiment may involve performing a discovery process to identify configuration items representing computing devices and applications in a managed network and determining that the configuration items exceed a threshold payload size. The embodiment may then involve generating a graph that represents the configuration items as nodes interconnected by unidirectional edges. The edges may represent respective associations between pairs of configuration items to which they connect, and the respective associations are classified either as weak associations that represent non-dependency relationships between a respective pair of nodes or as strong associations that represent dependency relationships between the respective pair of nodes. The embodiment may involve dividing the graph into overlapping sub-graphs based on the respective associations represented by the edges and, for each sub-graph, separately transmitting the configuration items defined therein to one or more server devices.

Abstract: Identifying components of a computer network based on connections between the components includes performing a first discovery operation to identify respective attributes of a first set of components and performing a second discovery operation to infer respective components of the second set of components not identifiable by the first discovery operation. The second discovery operation is performed by sending probes for collecting network flow data indicative of network flows between components of the first set of components and other components of the computer network. The collected network flow data is used to identify connections between ones of the first set of components and ones of the other components, determining sequences of the identified connections, and infer respective attributes of at least some of the second set of components based on the determined sequences of the identified connections.

Abstract: Systems and methods for generating a graphical display region including a synchronized display of alert data and impact data indicative of conditions of a computing infrastructure are herein disclosed as comprising, in an implementation, identifying alerts, each alert having a timestamp indicative of a first time at which it was identified, performing an impact calculation to generate the impact data based on alerts valid as of a second time proximate to an impact calculation start time, and generating a graphical display region including impact data valid as of a display time and alert data indicative of the alerts valid as of the second time.

Abstract: Identifying components of a computer network based on connections between the components includes performing a first discovery operation to identify respective attributes of a first set of components and performing a second discovery operation to infer respective components of the second set of components not identifiable by the first discovery operation. The second discovery operation is performed by sending probes for collecting network flow data indicative of network flows between components of the first set of components and other components of the computer network. The collected network flow data is used to identify connections between ones of the first set of components and ones of the other components, determining sequences of the identified connections, and infer respective attributes of at least some of the second set of components based on the determined sequences of the identified connections.

Abstract: Systems and methods are disclosed for invoking a first discovery probe against a target device at a first time to obtain first probe data; determining a first hash value based at least in part on the first probe data; storing the first hash value, the stored first hash value associated with the first discovery probe and the first device; transmitting the first probe data to the server device; invoking the first discovery probe against the first device at a second time to obtain second probe data; determining a second hash value based at least in part on the second probe data; determining that a match has occurred, where the first hash value matches the second hash value; and, responsive to the match, transmitting an indication of no change, from the first probe data, to the server device.

Abstract: A custom graph of nodes can be selectively generated based on a selected node in a graph representative of a network-connected computing infrastructure. The custom graph can, for example, be generated using software executing on a server device. The server device can receive an indication of the selected node from a client device. A plugin can then be invoked by providing the selected node to the plugin. Responsive to providing the selected node to the plugin, the plugin can provide output including child nodes generated by the plugin. The child nodes generated by the invocation of the plugin can be iteratively processed to generate the custom graph, such as by providing those child nodes to the plugin for subsequent invocation, as applicable. After the custom graph is generated, it can be transmitted to the client device from which the indication of the selected node was received. The custom graph may be displayed at the client device.

Abstract: Systems and methods for processing alerts indicative of conditions of nodes of a computing infrastructure are herein disclosed as comprising, in an implementation, generating a node hierarchy comprising nodes associated with a service model, wherein relationships between the nodes are based on impact rules, identifying alerts related to the node hierarchy, wherein the alerts are indicative of impairments affecting at least a portion of the node hierarchy, and performing impact calculation for nodes of the node hierarchy based on the identified alerts. In an implementation, the impact values may be calculated in parallel for nodes indicated for processing. In an implementation, the nodes associated with the service model represent infrastructure or applicative resources and comprise nodes included in the service model and nodes related to, but not included in, the service model.

Abstract: Systems and methods for generating a graphical display region including a synchronized display of alert data and impact data indicative of conditions of a computing infrastructure are herein disclosed as comprising, in an implementation, identifying alerts, each alert having a timestamp indicative of a first time at which it was identified, performing an impact calculation to generate the impact data based on alerts valid as of a second time proximate to an impact calculation start time, and generating a graphical display region including impact data valid as of a display time and alert data indicative of the alerts valid as of the second time.