Recommendation generation based on selection of selectable elements of visual representation

Patent metadata

Field	Value
Publication number	US-11340931-B2
Application number	US-201916554370-A
Country	US
Kind code	B2
Filing date	Aug 28, 2019
Priority date	Jul 23, 2019
Publication date	May 24, 2022
Grant date	May 24, 2022

Abstract

Some embodiments provide a novel method for collecting and reporting attributes of data flows associated with machines executing on a plurality of host computers to an analysis appliance and providing visual representations of the data to a user. Some embodiments provide a visual representation of the collected data that allows a user to select a set of machines and flows and initiate recommendation generation based on the selected machines and flows. The recommendation generation, in some embodiments, includes identifying flows for which rules have not been defined and filtering the identified rules to remove flows for which rules should not be defined. Some embodiments use the identified rues to identify services and groups associated with the rules and generate recommendations for rules, groups and services based on the identified flows, groups and services. The recommendations, in some embodiments, are implemented as a single PATCH API.

First claim

We claim:

1. A method for providing a user with a set of recommendations regarding flows between machines executing on a plurality of host computers, the method comprising:
providing a visual representation of machines executing on a plurality of host computers and flows between the machines;
receiving a selection of a set of machines and related flows through a selection of interactive elements of the visual representation; and
generating a set of recommendations for rules to apply to the selected set of machines and the related flows.

2. The method of claim 1 , wherein the interactive elements comprise machine identifier elements and flow identifier elements.

3. The method of claim 2 , wherein the visual representation of at least one flow comprises a flow identifier element indicating that the represented flow does not have a rule defined for the flow.

4. The method of claim 2 , wherein the interactive elements further comprise machine group elements that, when selected, select a respective set of machines associated with a respective machine group and a respective set of flows related to machines in the machine group.

5. The method of claim 2 , wherein receiving the selection of the set of machines and related flows comprises receiving a selection of flow identifier elements for the set of related flows that also selects machines associated with the selected flow identifier elements.

6. The method of claim 2 , wherein receiving the selection of the set of machines and related flows comprises receiving a selection of a set of machine identifier elements that also selects the related flows associated with the selected machines.

7. The method of claim 6 , wherein the related flows are flows for which no rule has previously been defined.

8. The method of claim 1 , wherein the visual representation provides a selectable element to initiate recommendation generation and generating the set of recommendations is performed based on receiving a selection of the selectable element to initiate recommendation generation.

9. The method of claim 1 , wherein generating the set of recommendations comprises generating a recommended rule for each application associated with the selected set of machines and related flows.

10. The method of claim 1 further comprising providing a graphical user interface comprising the generated set of recommendations, a first set of selectable elements for editing the generated set of recommendations, and a second set of selectable elements for publishing one of an edited set of recommendations and an unedited set of recommendations.

11. A non-transitory machine readable medium storing a program for execution by a set of processing units, the program for providing a user with a set of recommendations regarding flows between machines executing on a plurality of host computers, the program comprising sets of instructions for:
providing a visual representation of machines executing on a plurality of host computers and flows between the machines;
receiving a selection of a set of machines and related flows through a selection of interactive elements of the visual representation; and
generating a set of recommendations for rules to apply to the selected set of machines and the related flows.

12. The non-transitory machine readable medium of claim 11 , wherein the interactive elements comprise machine identifier elements and flow identifier elements.

13. The non-transitory machine readable medium of claim 12 , wherein the visual representation of at least one flow comprises a flow identifier element indicating that the represented flow does not have a rule defined for the flow.

14. The non-transitory machine readable medium of claim 12 , wherein the interactive elements further comprise machine group elements that, when selected, select a respective set of machines associated with a respective machine group and a respective set of flows related to machines in the machine group.

15. The non-transitory machine readable medium of claim 12 , wherein the set of instructions for receiving the selection of the set of machines and related flows comprises a set of instructions for receiving a selection of flow identifier elements for the set of related flows that also selects machines associated with the selected flow identifier elements.

16. The non-transitory machine readable medium of claim 12 , wherein the set of instructions for receiving the selection of the set of machines and related flows comprises a set of instructions for receiving a selection of a set of machine identifier elements that also selects the related flows associated with the selected machines.

17. The non-transitory machine readable medium of claim 16 , wherein the related flows are flows for which no rule has previously been defined.

18. The non-transitory machine readable medium of claim 11 , wherein the visual representation provides a selectable element to initiate recommendation generation and the set of instructions for generating the set of recommendations is executed based on receiving a selection of the selectable element to initiate recommendation generation.

19. The non-transitory machine readable medium of claim 11 , wherein the set of instructions for generating the set of recommendations comprises a set of instructions for generating a recommended rule for each application associated with the selected set of machines and related flows.

20. The method of claim 11 further comprising a set of instructions for providing a graphical user interface comprising the generated set of recommendations, a first set of selectable elements for editing the generated set of recommendations, and a second set of selectable elements for publishing one of an edited set of recommendations and an unedited set of recommendations.

Assignees

• Vmware Inc

Inventors

• Krishna Sunitha
• Kumar Kausum
• Mordani Rajiv
• Shendure Ashish
• Patel Ashish
• Ghannadian Farzad

Classifications

• G06F9/45558 Primary

  Hypervisor-specific management and integration aspects · CPC title

• G06F9/45533

  Hypervisors; Virtual machine monitors · CPC title

• H04L43/026 Primary

  using flow identification · CPC title

• H04L41/0859

  by keeping history of different configuration generations or by rolling back to previous configuration versions · CPC title

• H04L63/0263

  Rule management · CPC title