SOLUTIONS ARE PROVIDED ON AN "AS IS" BASIS. NEITHER FLEXERA NOR ITS SUPPLIERS MAKE ANY WARRANTIES, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE OR NONINFRINGEMENT. LICENSEE MAY HAVE OTHER STATUTORY RIGHTS. HOWEVER, TO THE FULL EXTENT PERMITTED BY LAW, THE DURATION OF STATUTORILY REQUIRED WARRANTIES, IF ANY, WILL BE LIMITED TO THE SHORTER OF (I) THE STATUTORILY REQUIRED PERIOD OR (II) THIRTY (30) DAYS FROM LICENSEE’S ACCEPTANCE OF THE AGREEMENT.
For some years now, FNMS provides the transparency on evidences in the evidence tab of the inventory device detail... devices are now listed in the evidences details... but understanding evidences with recognition across devices, or getting this transparency if you are in an old version can be useful.
Management of applications recognition is an advanced area that requires sometimes analysis and tracing back to objects that are not always visible in FNMP for performance reasons particularly
And WMI evidences (used to identify applications that have no reliable file or installer evidences (SQL Server (for Editions), Windows etc.).
Found evidences (Name: acrobat.exe, version: 10.0.0.396, Publisher: Adobe) will be mapped to ARL evidences (Name acrobat.exe, Version: 10.%, Publisher: Acrobat%). These file evidences are mapped to applications (A title, linked to Product, Version and Edition).
The challenge is that these mappings can be n to n, the sources for evidences can be multiple and overlapping, the evidences can be used for recognition of just to catch usage up to the application (“Not for recognition” for example on acrobat.exe that has no information of edition for instance).
The present view can be imported in FNMP custom views using SQL Server Management Studio with a Power User on the FNMP Database (that can create stored procedures and views records)
Three versions of the view exist
An initial check will be to make sure that no view or stored procedures already exist with the same name. I have prefixed the records with nr_Cust, which should decrease this risk.
You need to define what folders we want to see these view in. the “-17” folder being the root folder
Since the evidences tables can be huge (45 million records typically for the file evidences to a 30 000 devices implementation), this is key to filter the records loaded in the view to get acceptable performance. The view can be filtered with a “ComputerName|%EvdenceName%” using the search bar on the view.
This view looks up on all evidences on computers and uses a "Computer|Application" filter that you need to set in search box of this report. "|Visio.exe" will return all visio.exe evidences. "SRV01|" will return all evidences on SRV01'
The view contains the following:
You need to input in the view’s search bar the filter: here, computerName = LT-ITA-100117 and the searched evidence name is “acroba”.
The evidence search will perform a “ComputerNme = ’LT-ITA-100117’ AND EvidenceName like ‘%acroba%’
The created report is accessible from the root node of the report index. As this is a custom report not using the standard reporting objects, the report cannot be modified (it can be deleted)
The view will provide useful information: evidence name, evidence type, historical last used dates, mapped ARL evidences, mapped applications and type of mapping (could be not for recognition, required…)
Given the small number of WMI evidences and the link to application names that is not always obvious, the computer filer will show all WMI evidence. The evidence name filter will filter also WMI evidence (try with "SQL").
This view looks up on all matched ARL evidences on computers and uses a "Computer|EvidenceName" filter that you need to set in search box of this report. "|Visio.exe" will return all visio.exe evidences. "SRV01|" will return all evidences on SRV01. This report does not retrieve raw imported evidences and is adapter to checking remote application data
This view looks up on all evidences on computers and uses a "Publisher|EvidenceName" filter that you need to set in search box of this report. "|Visio" will return all evidences containing "Visio" . "Micros|" will return all evidences containing "Micros"
To create these views, run query below from the SQL Server Management Studio. (Please use the queries in embedded file).
Important: the view join the Inventory Manager database to catch the file path that is not imported into the SAM database (FNMSCompliance). You need to check the name of the Inventory Manager Database that could be IM or FNMSInventory and replace with the appropriate name in the section of the SQL code with the “be careful” comment
AND iie.ComplianceConnectionID = (SELECT ComplianceConnectionID FROM ComplianceConnection WHERE ConnectionTypeID = 1 AND PrimaryConnection = 1) -- Be careful to the IM db name here!
Variation: focus on ARL evidences (to address the need for remote evidences) collection (on Citrix, on raw evidence is collected for instance).
Variation 2: The “Installer Evidences on computers (NR)” shows only installer evidences and has an Publisher|EvidenceName filter
Starting with FNMS 2019R2, a new “Raw File Path” table has been created. There is no more normalization of the path and the report catches the real path for all inventory sources. No more need to check the Inventory Manager database name.
Jun 13, 2022 06:26 PM - edited Apr 21, 2023 11:30 AM