Servicenow, Inc.

Haviv Rosh

Yuval Rimar

Yuval Cohen

Shai Mohaban

Yarin Benado

Noam Biran

David Joshua Wiener

Asaf Garty

Hail Tal

Adar Margalit

Tal Kapon

Netta Hasdai

Yair Leibkowiz

Nir Yariv

Alexei Tilikin

Yaron Hecker

Roy Wallerstein

Chinna Babu Polinati

Madhavi Puvvada

Daniel Badyan

Stephen Scott Tucker

Amit Chandulal Dhuleshia

Ofer Gati

Chris Nguyen

Hardik Modi

Oron Subayi

Olga Shaked

Akshay Patekar

Vishal Rao

Evan Qu

Neta Hasdai-Rippa

Rukshan Parera

A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform. The software application may be configured to: obtain a unit of programmatic code from a third-party computing system, where the unit of programmatic code is hosted by the third-party computing system on behalf of the managed network, and where a program using the unit of programmatic code is executable by computing resources of the third-party computing system that are assigned on demand; parse the unit of programmatic code for a pattern indicative of respective relationships between the unit of programmatic code and service(s) provided by the third-party computing system; generate an association between the unit of programmatic code and the service(s); and store, in the database, representations of the unit of programmatic code, the service(s), and the association therebetween as discovered configuration items.

Discovery and service mapping of serverless resources

Systems and methods may include a managerial server, such as an intermediary measurement, instrumentation, and discovery (MID) server, communicatively coupled to an instance hosted by a cloud service platform. The managerial server is also coupled to an agent. The managerial server is configured to receive a first result from a first check executed by the agent having a first check type and to transmit the first result to the instance using a connection type generic to multiple check types including the first check type. The managerial server is also configured to receive a second result from a second check executed by the agent having a second check type and to transmit the second result using a dedicated pipeline for the second check type.

Systems and methods for an enhanced framework for a distributed computing system

The present approach relates to determining suitable entry points for initiating discovery and mapping of an enterprise service. For example, one or more tables may be utilized that include information regarding connections and/or communication between configuration items (CIs) of the enterprise service. From the tables, a graph may be created with nodes of the graph representing an internet protocol (IP) address and a port associated with the CIs, and edges of the graph representing the connections and/or communication between the CIs. The graph may be traversed according to outbound edges starting from a node with zero or few outbound edges. The nodes that are unreachable, or untraversed, may be flagged as suitable entry point candidates. In some embodiments, the flagged suitable entry point candidates may be reconciled with already known entry points included in the one or more tables.

Systems and methods for determining entry points for mapping a network

An example system includes (i) a software product having a plurality of code units that accesses a database, (ii) a processor, and (iii) a non-transitory computer readable storage medium having stored thereon software tests and instructions that cause the processor to: execute the software tests on a first version of the software product; determine a first mapping between each respective software test and one or more of the code units; determine a second mapping between each respective software test and one or more data units in the database; determine that, between a second version and the first version of the software product, a particular code and data unit have changed; select, from the first and the second mappings, a set of software tests with mappings to the particular code unit or data unit; and execute the set of software tests on the second version of the software product.

Dependency mapping between program code and tests to rapidly identify error sources

The present approach relates to querying a configuration item (CI). The CI may be associated with a monitoring agent. In accordance with this approach, a check request is sent to a management, instrumentation, and discovery (MID) server. The check request may be sent to the monitoring agent. Additionally, a check result may be received from the monitoring agent. The check result may have data associated with the CI and the check request.

Systems and methods for enhanced monitoring of a distributed computing system

An example embodiment may involve performing a discovery process to identify configuration items representing computing devices and applications in a managed network and determining that the configuration items exceed a threshold payload size. The embodiment may then involve generating a graph that represents the configuration items as nodes interconnected by unidirectional edges. The edges may represent respective associations between pairs of configuration items to which they connect, and the respective associations are classified either as weak associations that represent non-dependency relationships between a respective pair of nodes or as strong associations that represent dependency relationships between the respective pair of nodes. The embodiment may involve dividing the graph into overlapping sub-graphs based on the respective associations represented by the edges and, for each sub-graph, separately transmitting the configuration items defined therein to one or more server devices.

Splitting network discovery payloads based on degree of relationships between nodes

A computerized system and method for generating an application structure for an application in a computerized organization having a plurality of components. An implementation includes generating the application structure for the application by including, in the application structure, applicative components and connections between applicative components identified using a first entry point. In an implementation, the identification of the applicative components and the connections between applicative components includes applying a first set of patterns against a first component associated with the first entry point to identify a first applicative component of the applicative components and a first connection of the connections, the first connection including a second entry point. The applicative components and the connections between applicative components can be recursively identified.

System and method for generating an application structure for an application in a computerized organization

Systems and methods for mapping configuration items to business functions within a corporate infrastructure are disclosed. Discovery processes to automatically create and update service maps may introduce an artificial dependency between configuration items that is not necessary to the business function represented in the service map. These unnecessary dependencies may be considered 'noise' and unnecessarily complicate the service map. Using machine learning techniques and procedures to identify short lived connections embodiments in accordance with this disclosure, dependency connections that may be considered noise may be detected and flagged. Once detected, these connections may be automatically removed from the service map to improve its accuracy and usefulness. Additionally, a user interface is provided that explains the 'reason codes' for identification of noise connections. Reason codes allow a user to understand how the machine learning algorithm traversed a decision tree to identify a connection as noise.

Traffic based discovery noise reduction architecture

An embodiment may involve a managed network containing computing devices. The computing devices may be respectively associated with unqualified domain names. One or more server devices may be disposed within a remote network management platform that manages the managed network. These server devices may be configured to: probe the managed network, by way of a proxy server application disposed within the managed network, to obtain information related to applications operating on the computing devices, network connectivity of the computing devices, and representations of the unqualified domain names; obtain a regular expression; determine a subset of the computing devices in the managed network on which a particular application is operating and for which the respectively associated unqualified domain names match the regular expression; and generate a map of the managed network in which the subset of the computing devices is represented as a grouped node instead of individual nodes.

Automatic grouping of similar applications and devices on a network map

An example system includes a database disposed within a remote network management platform that manages a managed network, where one or more worker nodes are configured to execute containerized software applications on behalf of the managed network. The system also includes a computing device configured to request and receive configuration data identifying the applications; access traffic data generated by packet detection modules disposed amongst the one or more worker nodes and configured to (i) monitor network traffic between the applications and (ii) generate and store the traffic data which is indicative of the monitored network traffic; parse the traffic data for one or more patterns indicative of communicative relationships between the applications; based on the one or more patterns being present in the traffic data, generate mappings between the applications that have communicative relationships therebetween; and store, in the database, the configuration data and the mappings.

Discovery and mapping of containerized software applications

A remote network management platform software application containing application programming interfaces (APIs) may be configured to facilitate the use of plugin software. A particular API may be associated with logic configured to check whether a toggle variable is active or inactive. A first unit of program code may be configured to execute when the toggle variable is inactive, and a second unit of program code may be configured to execute when the toggle variable is active. First plugin software may be implemented in a scripting language. The first plugin software, whether enabled or disabled, might not affect the toggle variable. Second plugin software may also be implemented in the scripting language. The second plugin software, when enabled, is configured to set the toggle variable as active.

Feature toggling using a plugin architecture in a remote network management platform

Systems and methods for a data synchronization architecture to synchronize provide a forward synchronization of data from a helper instance to a customer facing instance and reverse synchronization of customer configuration data changes to the helper instance are disclosed. Helper instances may be configured to provide an upgrade or maintenance path for a customer facing instance. Helper instances may be a different version and have a different schema than the primary customer facing instance. Database triggers and business rules may be used to manipulate data calculated or discovered by a helper instance prior to synchronization to the primary instance. Database triggers and business rules may fire in the primary instance after each synchronization to perform necessary recalculations or adjust data associations based on data provided from the helper instance. Helper instances may queue data over time and then perform a synchronization of data from the queue.

Data synchronization architecture

A custom graph of nodes can be selectively generated based on a selected node in a graph representative of a network-connected computing infrastructure. The custom graph can, for example, be generated using software executing on a server device. The server device can receive an indication of the selected node from a client device. A plugin can then be invoked by providing the selected node to the plugin. Responsive to providing the selected node to the plugin, the plugin can provide output including child nodes generated by the plugin. The child nodes generated by the invocation of the plugin can be iteratively processed to generate the custom graph, such as by providing those child nodes to the plugin for subsequent invocation, as applicable. After the custom graph is generated, it can be transmitted to the client device from which the indication of the selected node was received. The custom graph may be displayed at the client device.

Growing community of inventors

Modiin, Israel

Haviv Rosh