Ignored Evidence - History Report

[ImIronMan]

Hi Team,
One of our clients have FNMS 2020R1 on-prem
In Dec 2020 - the total installation count (adding up 'installed' count from installed apps page) was around 9.2 million.
This month report - showing up only 3 million counts, missing a huge 6.2 million installation counts, later observed that around 2000 apps (mostly components and freeware) which reported 5 million installs in Dec 2020, were not even present on the installed apps page or All Applications page in this month's report.
When we checked for evidence for few apps and found them to be ignored. So we guess because this evidence is ignored, the corresponding Applications are unlinked from evidence, so disappeared from the applications page in FNMS.

Now, is there any script/query to get a report on all evidence that has been ignored with date, operators, etc., like an audit trail? The evidence page doesn't have any history tab in the GUI
Or is it happened because of any recent ARL updates? Coz it's hard to believe that these 2000 evidences were ignored manually by mistake.

Also, is there any way to make all 'ignored' evidences to 'Active' in bulk ? The Recover option does not seem to solve the problem to update in bulk

[mfranz]

Hi,

I think a lot of customers would welcome an audit-proof approach for evidences. But I am afraid the evidence schema is too complex for the existing Compliance History.

You should be able to bulk-manipulate the "Ignored" attribute within the database (e.g. in table InstallerEvidence), but you run the risk of your changes being undone by an ARL import.

Best regards,

Markward

[bfaller]

Hello, audit-trail is attached to the devices, where you will see when applicationa are attached or released to the device.

Takes somes samples, see the dates and compare with ARL update...

Regards.