Title
#fleet
David J Davis

David J Davis

07/27/2022, 8:46 PM
How long is software kept in FleetDM's software inventory after it is no longer detected in the environment?
Kathy Satterlee

Kathy Satterlee

07/27/2022, 9:06 PM
Hi, @David J Davis! What version of Fleet are you running?
9:09 PM
Software inventory by default updates once an hour, but there was a tweak made in 4.16.0 to better handle orphaned software.
David J Davis

David J Davis

07/27/2022, 9:15 PM
FleetDM Premium 4.16
Kathy Satterlee

Kathy Satterlee

07/27/2022, 9:43 PM
Are you seeing any unexpected behavior with Software lingering longer than expected?
9:44 PM
How often software updates depends on the value set for
FLEET_VULNERABILITIES_PERIODICITY
. The default is 1 hr.
David J Davis

David J Davis

07/28/2022, 12:28 PM
Thanks for the information. I use a Fleet live query to gather a software inventory daily and populate/update a SQL database. I was looking for a way to clean this database of applications no longer present in the environment.
12:34 PM
I can't really use the live query, because it's not always complete, works fine for populating/updating as it's done daily. However, for removal, if a machine is temporarily offline and is the only one with a specific piece of software, then it could get removed and then added when the machine comes back online.
12:35 PM
So software is updated hourly by default, what if a machine is still in FleetDM's hosts DB, but is offline, would that cause Fleet to remove any software that had been found on that machine in the past?
Kathy Satterlee

Kathy Satterlee

07/28/2022, 2:11 PM
Only the online hosts are updated, so that shouldn't be an issue!
David J Davis

David J Davis

07/28/2022, 2:30 PM
So would the software get removed if the machine is offline or remain until the machine got cleaned from the hosts DB?
2:40 PM
or came back online and got a software inventory update.
Kathy Satterlee

Kathy Satterlee

07/28/2022, 2:42 PM
The software will remain until the host comes back online or is removed.
David J Davis

David J Davis

07/28/2022, 3:01 PM
OK, that is excellent, that should work for my purpose.
Kathy Satterlee

Kathy Satterlee

07/28/2022, 7:36 PM
@David J Davis If the publisher from the programs table was used to populate the
vendor
field in the Software API, would that get you the data you need?
7:37 PM
Letting those ideas percolate.