Hi, Thanks I am aware of that issue. But in this case FNMS is saying that is last reported/ Inventoried on September 2017. So it should not report on it.
or Online help is wrong as it stated:
The most recent date this evidence was detected on this inventory device.
But then should be:
The first date this evidence was detected on this inventory device.
The reason the dates don't match up is because the inventory date in screenshot 1 relates to the normalised inventory date for the device itself which is the most recent date across all sources.
In the Evidence tab, the inventory date relates to the date for that specific data source / entry and we intentionally kept this separate from the main inventory device date to cover scenarios where one data source / piece of evidence was out of date whereas the device itself was showing a recent date.
In this instance I would check whether that particular source is being updated as it likely is showing outdated inventory.
Does this help?
Thanks for your response. In that case the online help needs to be extended with this useful information.
Regarding your feedback: In this instance I would check whether that particular source is being updated as it likely is showing outdated inventory.
In my case this device only has 1 Source and that is the FNMS agent. And it is reporting last 29 September. So this means the agent is fully update on Inventory. Als we see other evidence with a record from 29September so this indicates the Software inventory was succesfully executed on 29 Sept.
Or do you mean with check whether that particular source: The evidence source (instead of Inventory source) for that report of installation. In this case OUI? This is probably because of the OUI bugg and it was last reported when it was installed in 2017.