This metric will return the hostname and software selected that has been offline for X days AND has Y software installed.Please adjust the X and Y values to meet your needs. X is offline in days, Y is a software name or partial name map_by_key(Devices[], DeviceSoftwareAudit[? contains(name, Y )].{uid:uid_r, name:name}[], uid )[? contains(name, Y ) && time_since(lastSeen_r, days ) > X ].[hostname, name]