Servicenow, Inc.

Bary Solomon

Robert Bitterfeld

Asaf Garty

Hail Tal

Aviya Aron

Daniel Badyan

Boris Erblat

Noam Biran

Tom Bar Oz

Alexandra Feiguine

Shay Herzog

Shiri Hameiri

Shimon Sant

Aviya Aharon

Leonid Suslov

A discovery application on a computing system is provided. The discovery application receives a user input, which is for discovery of resources associated with a cloud operating system of a cloud computing system. The user input includes an authentication credential and account information associated with the cloud operating system. Based on the received input, the discovery application executes a discovery pattern comprising operations for the discovery of resources. The cloud operating system includes a group of services to access such resources. At least one of the operations corresponds to an API call to an API endpoint associated with a service of the group of services. The discovery application receives a response to the API call from the cloud operating system. The response includes a payload of information associated with the resources. The discovery application updates, based on the received response, one or more configuration items in a configuration management database.

Discovery of resource clusters

A discovery application on a computing system is provided. The discovery application executes a discovery pattern comprising a sequence of operations for discovery of resources within a load balancing system, wherein execution of the discovery pattern corresponds to making one or more application programming interface (API) calls to an API associated with a network address of the load balancing system; receives a response to the one or more API calls from the load balancing system, wherein the response comprises a payload of information associated with the resources; and updates, based on the response and in a configuration management database (CMDB), one or more configuration items (CIs) associated with the resources.

Discovery of network load balancers

A computing system includes a database and a discovery application. The discovery application obtains credentials for accessing a server hosting a software bus application which connects a plurality of applications within a managed network. The discovery application selects, based on a pattern corresponding to the software bus application, one or more files to access, transmits, to the server, instructions to access the one or more files, and receives therefrom data identifying a plurality of attributes of the software bus application. Based on this data, the discovery application transmits, to the server, instructions to identify communicative connections established between the plurality of software applications by way of the software bus application and receives therefrom data identifying the communicative connections. Based on (i) the plurality of attributes and (ii) the communicative connections, the discovery application generates a mapping that represents the communicative connections and stores the mapping in the database.

Discovery of database and related services

A computing system includes a database and a discovery application that initiates discovery of software applications within a managed network by probing the computing devices for applications in stalled thereon. The discovery application executes discovery patterns in an attempt to classify a discovered application and determines that the discovered application is unclassified after executing the discovery patterns. In response to determining that the discovered application is unclassified, the discovery application (i) generates a configuration item representing the discovered application without classification and (ii) selects a characteristic file containing attributes of the discovered application. The discovery application provides the characteristic file to a machine learning (ML) classifier trained using a plurality of characteristic files. The discovery application receives, from the ML classifier, a classification of the discovered application, modifies the configuration item to include the classification of the discovered application, and stores, in the database, the configuration item as modified.

Identifying applications with machine learning

A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform and configured to: obtain, from an external computing system, information about a function-application arranged to execute source code segment(s) on demand; determine that the obtained information relates to (i) a plurality of authorization-keys each respectively arranged to authorize on-demand execution of one of the source code segments, (ii) a first key-value string pair that enables establishment of connectivity to a service of the external computing system or of another computing system, and/or (iii) a second key-value string pair that enables establishment of connectivity to a data source of the external computing system or of another computing system, and responsively determine association(s) between the source code segment(s), the function-application, the service, and/or the data source; and store the association(s) in the database.

Functional discovery and mapping of serverless resources

A system may include persistent storage configured to store: a shared classification model including a plurality of classifiers based on training data from a plurality of managed networks, and a representation of a plurality of software applications executable computing devices within a particular managed network. The system may also include a discovery application configured to perform operations including obtaining attributes of a software process. The operations may also include determining, by way of the shared classification model and based on the attributes, a suggested classifier of the plurality of classifiers and determining, by way of the suggested classifier and based on the attributes, a suggested classification for the software process. The operations may further include receiving an indication that the suggested classification has been accepted, based on receiving the indication, updating the representation to indicate the suggested classification, and storing, in the persistent storage, the representation as updated.

Shared machine learning model for application discovery

A computing system includes a discovery application that identifies a computing device associated with a managed network. The application determines a first command that causes the computing device to invoke a function that provides as output attributes of the computing device. The command includes a parameter that suppresses any textual error messages that the function places in the output. The application also determines a second command that causes the computing device to provide a numerical exit status of the function. The application causes the computing device to execute the first and second commands, and obtains the output and the numerical exit status. Based on the numerical exit status, the application determines that the function did not fully obtain the attributes of the computing device and, in response, (i) modifies the first command, and (ii) causes the computing device to execute the first command as modified and the second command.

Enhancing discovery patterns with shell command exit status

A computing system includes persistent storage and a discovery application configured to perform operations including obtaining, from a remote computing system, first attributes of a first computing resource, which indicate a first unique resource identifier associated with an authentication system provided by the remote computing system and utilized by the first computing resource. The operations also include obtaining, from the remote computing system, second attributes of the authentication system, which indicate a second unique resource identifier used by the authentication system. The operations additionally include determining that the first unique resource identifier matches the second unique resource identifier and, based on this determination, generating a mapping between the first computing resource and the authentication system to indicate that access to the first computing resource is controlled by the authentication system. The operations further include storing, in the persistent storage, the mapping as one or more configuration items.

Discovery and mapping of a cloud-based authentication, authorization, and user management service

A computing system is disposed within a computational instance of a remote network management platform associated with a managed network. The computing system (i) performs a discovery process that identifies attributes of computing devices and software applications disposed within the managed network; (ii) stores, in a persistent storage of the computing system, the attributes that were identified; (iii) indexes the attributes that were stored in the persistent storage for searching; (iv) receives a configuration file for a particular software application; (v) uses a search engine to find matches between one or more terms in the configuration file and one or more of the attributes; (vi) based on the matches, defines an operational mapping between the particular software application and one or more of the computing devices or software applications of those disposed within the managed network; and (vii) stores, in the persistent storage, a representation of the operational mapping.

Dictionary-based service mapping

A computing system is disposed within a computational instance of a remote network management platform associated with a managed network. The computing system (i) performs a discovery process that identifies attributes of computing devices and software applications disposed within the managed network; (ii) generates a list of keywords based on the identified attributes as stored, including a particular keyword associated with a first computing device or a first software application of those disposed within the managed network; (iii) searches for the particular keyword in one or more files from the managed network; (iv) determines that the particular keyword is included in a file associated with a second computing device or a second software application of those disposed within the managed network; and (v) defines an operational mapping between: (a) the first computing device or the first software application and (b) the second computing device or the second software application.

Service mapping based on discovered keywords

A discovery application may obtain, from a remote storage system configured to host storage structures, first data that identifies relationships among the storage structures. The discovery application may generate, based on the first data, a mapping of the storage structures, store the mapping as one or more configuration items, and provide, to the remote storage system, instructions configured to cause the remote storage system to notify the discovery application of modification events associated with the storage structures. The discovery application may receive, from the remote storage system, a notification of a modification event associated with a particular storage structure of the storage structures and, in response, obtain, from the remote storage system, second data that identifies a modification to the particular storage structure. The discovery application may modify the mapping based on the second data and store the modified mapping by updating the one or more configuration items.

Discovery of remote storage services and associated applications

An example embodiment relates to discovering computing devices in a managed network that are involved in blockchain-based mining. The example embodiment may involve a proxy server application that is disposed within the managed network, controlled by a remote network management platform, and configured to: provide, to a computing device disposed within the managed network, one or more instructions to identify one or more applications executing on the computing device; determine, for an application of the one or more applications that were identified, a command string used to invoke the application to execute on the computing device; compare the command string to a plurality of identifiers indicative of blockchain-based mining; determine that the command string includes an identifier from the plurality of identifiers indicative of blockchain-based mining; and based on determining that the command string includes the identifier, store, in a database, an indication that the application is associated with blockchain-based mining.

Identifying computing devices in a managed network that are involved in blockchain-based mining

A system may include persistent storage containing discovery patterns configured to identify computing resources and relationships therebetween, and an application configured to perform operations, including selecting a discovery pattern from the discovery patterns and obtaining, from the persistent storage, source code representing the discovery pattern. The operations may also include parsing the source code to determine therein (i) a plurality of configuration items (CIs) representing the computing resources that the discovery pattern is configured to discover when executed, and (ii) relationships between respective CIs of the plurality of CIs. The operations may additionally include generating a representation of the discovery pattern based on the plurality of CIs and the relationships. The representation may include the plurality of CIs represented by a plurality of nodes and the relationships represented by edges between respective nodes. The representation may be stored in the persistent storage in association with the discovery pattern.

Growing community of inventors

Petah Tikva, Israel

Bary Solomon