A
Andy Althouse
This metric will return the hostname and software selected that has been offline for X days AND has Y software installed.Please adjust the X and Y values to meet your needs. X is offline in days, Y is a software name or partial name
map_by_key(Devices[], DeviceSoftwareAudit[? contains(name,
Y
)].{uid:uid_r, name:name}[],
uid
)[? contains(name,
Y
) && time_since(lastSeen_r,
days
) >
X
].[hostname, name]