Automatic grouping of similar applications and devices on a network map

• US 10,708,139 B2
• Filed: 08/01/2017
• Issued: 07/07/2020
• Est. Priority Date: 08/01/2017
• Status: Active Grant

• Current Assignee: ServiceNow Incorporated
• Original Assignee: ServiceNow Incorporated
• Inventors: Rosh, Haviv, Tilikin, Alexei
• Primary Examiner(s): Recek, Jason D
• Application Number:
  US15/666,164
• Publication Number:
  US 20190044815A1
• Time in Patent Office: 1,071 Days
• CPC Class Codes: G06F 16/90344 by using string matching techniques
• CPC Class Codes: G06F 16/955 using information identifiers, e.g. uniform resource locators [URL]
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/14 Network analysis or design
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 67/53 using third party service providers

Abstract

An embodiment may involve a managed network containing computing devices. The computing devices may be respectively associated with unqualified domain names. One or more server devices may be disposed within a remote network management platform that manages the managed network. These server devices may be configured to: probe the managed network, by way of a proxy server application disposed within the managed network, to obtain information related to applications operating on the computing devices, network connectivity of the computing devices, and representations of the unqualified domain names; obtain a regular expression; determine a subset of the computing devices in the managed network on which a particular application is operating and for which the respectively associated unqualified domain names match the regular expression; and generate a map of the managed network in which the subset of the computing devices is represented as a grouped node instead of individual nodes.

Claims

1. A system comprising:

a managed network containing a plurality of computing devices, wherein the plurality of computing devices are respectively associated with unqualified domain names;

a proxy server application disposed within the managed network; and

one or more server devices disposed within a remote network management platform that manages the managed network, wherein the one or more server devices are configured to;

probe the managed network by way of the proxy server application to obtain information related to applications operating on the plurality of computing devices, network connectivity of the plurality of computing devices, and representations of the unqualified domain names;

obtain two or more regular expressions, wherein each regular expression of the two or more regular expressions comprises a respective character string of one or more meta-characters that indicate a respective characteristic of a matching unqualified domain name and one or more regular characters that are present within the matching unqualified domain name;

determine an order in which to apply the two or more regular expressions to the unqualified domain names based on a respective type of each application operating on the plurality of computing devices;

apply the two or more regular expressions to the unqualified domain names based on the order, wherein applying each regular expression of the two or more regular expressions comprise determining a respective subset of the plurality of computing devices in the managed network on which a particular application of the applications is operating and for which the respectively associated unqualified domain names match the regular expression;

generate a map of the managed network, wherein the applications operating on the plurality of computing devices are represented as individual nodes in the map, wherein edges between the individual nodes are defined based on the network connectivity of the plurality of computing devices, and wherein each respective subset of the plurality of computing devices is represented as a respective grouped node instead of as individual nodes; and

provide, for display on a client device, a representation of the map.

2. The system of claim 1, wherein the respectively associated unqualified domain names that match the regular expression are also associated with the particular application.

3. The system of claim 1, wherein reception of the map by the client device causes the client device to display the map.

4. The system of claim 1, wherein the one or more server devices are configured to:

receive, from the client device, an indication that a toggle associated with a grouped node has been activated; and

provide, for display on the client device, a second representation of the map in which the grouped node is replaced by a plurality of individual nodes respectively representing the subset of the plurality of computing devices.

5. The system of claim 1, wherein the one or more server devices are configured to:

generate a string representing a common portion of the respectively associated unqualified domain names that match the regular expression, wherein the map as displayed includes, for the grouped node, an indication of the particular application, an indication of a number of computing devices represented by a grouped node, and an indication of the string.

6. The system of claim 5, wherein the string includes the common portion and a wildcard character, the wildcard character representing parts of the respectively associated unqualified domain names that are not common.

7. The system of claim 5, wherein the grouped node represents a plurality of individual nodes, wherein the computing devices represented by the plurality of individual nodes are each connected, in the managed network, to a computing device represented by a further node, and wherein the map as displayed includes a single connection between the grouped node and the further node.

8. The system of claim 7, wherein there are n nodes in the plurality of individual nodes, and wherein the map as displayed labels the single connection with a representation of n.

9. A method comprising:

probing, by a computing system, a managed network to obtain information related to applications operating on a plurality of computing devices on the managed network, network connectivity of the plurality of computing devices, and representations of unqualified domain names respectively associated with the plurality of computing devices;

obtaining, by the computing system, two or more regular expressions, wherein each regular expression of the two or more regular expressions comprises a respective character string of one or more meta-characters that indicate a respective characteristic of a matching unqualified domain name and one or more regular characters that are present within the matching unqualified domain name;

determining, by the computing system, an order in which to apply the two or more regular expressions to the unqualified domain names based on a respective type of each application operating on the plurality of computing devices;

applying, by the computing system, the two or more regular expressions to the unqualified domain names based on the order, wherein applying each regular expression of the two or more regular expression comprise determining a respective subset of the plurality of computing devices in the managed network on which a particular application of the applications is operating and for which the respectively associated unqualified domain names match the regular expression;

generating, by the computing system, a map of the managed network, wherein the applications operating on the plurality of computing devices are represented as individual nodes in the map, wherein edges between the individual nodes are defined based on the network connectivity of the plurality of computing devices, and wherein each respective subset of the plurality of computing devices is represented as a respective grouped node instead of as individual nodes; and

providing, by the computing system and for display on a client device, a representation of the map.

10. The method of claim 9, wherein the computing system is disposed within a remote network management platform that manages the managed network.

11. The method of claim 9, wherein the respectively associated unqualified domain names that match the regular expression are also associated with the particular application.

12. The method of claim 9, wherein reception of the map by the client device causes the client device to display the map.

13. The method of claim 9, comprising:

receiving, from the client device, an indication that a toggle associated with a grouped node has been activated; and

providing, for display on the client device, a second representation of the map in which the grouped node is replaced by a plurality of individual nodes respectively representing the subset of the plurality of computing devices.

14. The method of claim 9, comprising:

generating a string representing a common portion of the respectively associated unqualified domain names that match the regular expression, wherein the map as displayed includes, for the grouped node, an indication of the particular application, an indication of a number of computing devices represented by a grouped node, and an indication of the string.

15. The method of claim 14, wherein the string includes the common portion and a wildcard character, the wildcard character representing parts of the respectively associated unqualified domain names that are not common.

16. The method of claim 14, wherein the grouped node represents a plurality of individual nodes, wherein the computing devices represented by the plurality of individual nodes are each connected, in the managed network, to a computing device represented by a further node, and wherein the map as displayed includes a single connection between the grouped node and the further node.

17. The method of claim 16, wherein there are n nodes in the plurality of individual nodes, and wherein the map as displayed labels the single connection with a representation of n.

18. An article of manufacture including a non-transitory computer-readable medium, having stored thereon program instructions that, upon execution by a computing system, cause the computing system to perform operations comprising:

probing a managed network to obtain information related to applications operating on a plurality of computing devices on the managed network, network connectivity of the plurality of computing devices, and representations of unqualified domain names respectively associated with the plurality of computing devices;

obtaining two or more regular expressions, wherein each regular expression of the two or more regular expressions comprises a respective character string of one or more meta-characters that indicate a respective characteristic of a matching unqualified domain name and one or more regular characters that are present within the matching unqualified domain name;

determining, by the computing system, an order in which to apply the two or more regular expressions to the unqualified domain names based on a respective type of each application operating on the plurality of computing devices;

applying, by the computing system, the two or more regular expressions to the unqualified domain names based on the order, wherein applying each regular expression of the two or more regular expression comprise determining a respective subset of the plurality of computing devices in the managed network on which a particular application of the applications is operating and for which the respectively associated unqualified domain names match the regular expression;

generating a map of the managed network, wherein the applications operating on the plurality of computing devices are represented as individual nodes in the map, wherein edges between the individual nodes are defined based on the network connectivity of the plurality of computing devices, and wherein each respective subset of the plurality of computing devices is represented as a respective grouped node instead of as individual nodes; and

providing, for display on a client device, a representation of the map.