Service maps for distributed native applications

A method comprising:

• by each compute node of a first compute node and a second compute node of a plurality of compute nodes executing a plurality of applications communicating using a plurality of connections:
• determining process identifiers for respective applications executed by the compute node;
• generating process information for the compute node identifying the applications executed by the compute node;
• and
• obtaining, and based on the process identifiers, connection information for the compute node associated with the applications executed by the compute node, wherein the connection information for the compute node identifies one or more connections associated with the applications executed by the compute node;
• collecting, by an analysis system, the process information for the first compute node and the connection information for the first compute node;
• collecting, by the analysis system, the process information for the second compute node and the connection information for the second compute node;
• associating, by the analysis system and based on the process information for the first compute node, the connection information for the first compute node, the process information for the second compute node, and the connection information for the second compute node, a connection of the one or more connections identified in connection information for the first compute node with an application of the applications executed by the second compute node that communicates using the connection;
• generating, by the analysis system, a service map comprising edges and nodes, wherein each of the edges represents a corresponding connection of the plurality of connections and connects a corresponding first node of the nodes representing a corresponding server application of plurality of applications and a second node of the nodes representing a corresponding client application of the plurality of applications that communicates with the server application using the corresponding connection, wherein an edge of the edges represents the connection and a node of the nodes connected by the edge represents the application of the applications executed by the second compute node;
• and
• outputting, by the analysis system, an indication of the service map.

Non-transitory computer-readable storage media storing instructions that, when executed, cause processing circuitry to:

• for each compute node of a first compute node and a second compute node of a plurality of compute nodes executing a plurality of applications communicating using a plurality of connections:
• determine process identifiers for respective applications executed by the compute node;
• generate process information for the compute node identifying the applications executed by the compute node;
• and
• obtain, based on the process identifiers, connection information for the compute node associated with the applications executed by the compute node, wherein the connection information for the compute node identifies one or more connections associated with the applications executed by the compute node;
• collect the process information for the first compute node and the connection information for the first compute node;
• collect the process information for the second compute node and the connection information for the second compute node;
• associate, based on the process information for the first compute node, the connection information for the first compute node, the process information for the second compute node, and the connection information for the second compute node, a connection of the one or more connections identified in the connection information for the first compute node, with an application of the applications executed by the second compute node that communicates using the connection;
• generate a service map comprising edges and nodes, wherein each of the edges represents a corresponding connection of the plurality of connections and connects a corresponding first node of the nodes representing a corresponding server application of the plurality of applications and a second node of the nodes representing a corresponding client application of the plurality of applications that communicates with the server application using the corresponding connection, wherein an edge of the edges represents the connection and a node of the nodes connected by the edge represents the application of the applications executed by the second compute node;
• and
• output an indication of the service map.