Agentless topology analysis
A computer system retrieves provisioning data and observability data (metrics, logs, events, alerts, inventory) for a plurality of components from remote servers. The computer system extracts component identifiers from the provisioning data and the log data. The computer system identifies relationships between components from the provisioning data and the log data, such as environmental variable relationships, network relationships, session relationships, access relationships, and network connection relationships. The computer system generates a topology in which nodes represent components and edges represent relationships. The topology is updated to show changes to components and relationships. A user may interact with a visual representation of the topology to change data displayed or invoke changes to the components and relationships represented by the topology.
1 . An apparatus comprising:
a computing device including one or more processing devices and one or more memory devices operably coupled to the one or more processing devices, the one or more memory devices storing executable code that, when executed by the one or more processing devices, causes the one or more processing devices to:
provision, by an orchestrator, computing resources of remote servers to a plurality of components according to provisioning data, the computing resources including computing power, memory, and storage;
instantiating, by the orchestrator, the plurality of components on the remote servers according to the provisioning data;
scaling, by the orchestrator, the plurality of components at least one of up or down according to the provisioning data;
extract component identifiers of the plurality of components from the provisioning data;
retrieve log data from the remote servers without use of an agent executing on the remote servers;
process the provisioning data and the log data to obtain a topology of the plurality of components, the topology including nodes representing the plurality of components and edges representing relationships between pairs of components of the plurality of components; and
outputting an interface representing criticality of one or more components of the plurality of components.
2 . The apparatus of claim 1 , wherein the interface represents density of components hosted by a server of the plurality of components.
3 . The apparatus of claim 1 , wherein the interface represents an aggregation of observability data from the plurality of components.
4 . The apparatus of claim 3 , wherein the aggregation of observability data is a time sequenced combination of observability data from the plurality of components.
5 . The apparatus of claim 1 , wherein the interface includes representations of a plurality of first components of the plurality of components dependent on a first server of the remote servers, one or more of the plurality of first components not executing on the first server.
6 . The apparatus of claim 1 , wherein the interface includes representations of a plurality of first components of the plurality of components dependent on a storage device of a first server of the remote servers, one or more of the plurality of first components not executing on the first server.
7 . The apparatus of claim 6 , wherein the plurality of first components are application instances.
8 . The apparatus of claim 6 , wherein each component of the plurality of first components has at least one relationship with respect to the first server or another component of the plurality of first components.
9 . The apparatus of claim 8 , the at least one relationship of each component includes at least one of a hosting relationship, an environmental variable relationship, a network relationship, a session relationship, an access relationship, and a network connection relationship.
10 . The apparatus of claim 1 , wherein the executable code, when executed by the one or more processing devices, further causes the one or more processing devices to:
retrieve realtime observability data for one or more components of the plurality of components from the remote servers; and
display the realtime observability data in the interface.
11 . A method comprising:
provision, by an orchestrator executing on a computer system including one or more computing devices, computing resources of remote servers to a plurality of components according to provisioning data;
instantiating, by the orchestrator, the plurality of components on the remote servers according to the provisioning data;
scaling, by the orchestrator, the plurality of components at least one of up or down according to the provisioning data;
extracting, by the computer system, component identifiers of the plurality of components from the provisioning data;
retrieving, by the computer system, log data from the remote servers without use of an agent executing on the remote servers;
processing, by the computer system, the provisioning data and the log data to obtain a topology of the plurality of components, the topology including nodes representing the plurality of components and edges representing relationships between pairs of components of the plurality of components; and
outputting, by the computer system, an interface representing criticality of one or more components of the plurality of components.
12 . The method of claim 11 , wherein the interface represents density of components hosted by a server of the plurality of components.
13 . The method of claim 11 , wherein the interface represents an aggregation of observability data from the plurality of components.
14 . The method of claim 13 , wherein the aggregation of observability data is a time sequenced combination of observability data from the plurality of components.
15 . The method of claim 11 , wherein the interface includes representations of a plurality of first components of the plurality of components dependent on a first server of the remote servers, one or more of the plurality of first components not executing on the first server.
16 . The method of claim 11 , wherein the interface includes representations of a plurality of first components of the plurality of components dependent on a storage device of a first server of the remote servers, one or more of the plurality of first components not executing on the first server.
17 . The method of claim 16 , wherein the plurality of first components are application instances.
18 . The method of claim 16 , wherein each component of the plurality of first components has at least one relationship with respect to the first server or another component of the plurality of first components.
19 . The method of claim 18 , wherein the at least one relationship of each component includes at least one of a hosting relationship, an environmental variable relationship, a network relationship, a session relationship, an access relationship, and a network connection relationship.
20 . The method of claim 11 , further comprising:
retrieving, by computer system, realtime observability data for one or more components of the plurality of components from the remote servers; and
displaying, by the computer system, the realtime observability data in the interface.