What is the best way to manage stale evidence? We have a device that had the Flexnet agent installed and collected inventory. It appears the Flexnet Agent is no longer working on this device which is not a huge concern since we now collect data through SCCM. We do have an issue were its still reporting on old evidence that was found in the Flexnet agent scan from months ago.
Is there a way to set the FNMS agent data to become ignored after so many days?
SCCM inventory is set to primary.
Thank you.
‎Jun 26, 2020 02:06 PM
‎Jun 26, 2020 02:09 PM
Hi,
The "Overlapping Inventory Filter" could help (see bottom):
Best regards,
Markward
‎Jun 27, 2020 04:57 AM
i tried this but it didn't seem to clean up the aged evidence.
‎Jul 06, 2020 08:49 AM
Hi,
Please check you stale inventory. Here is an example showing all (software) inventory older than 90 days.
USE FNMSInventory
SELECT *
FROM Computer c
JOIN InventoryReport ir
ON c.ComputerID = ir.ComputerID
WHERE DATEADD(DAY,90,SWDate) < GETDATE()
With minimal changed to the query, you can then remove unwanted inventory.
Best regards,
Markward
‎Jul 06, 2020 09:57 AM