Investigation with packages with Finder (classic)

Nexthink simplified investigations that retrieve packages or include a condition on packages. The results take into account only those packages that are effectively installed, discarding uninstalled packages.

Nevertheless, it is still possible to find installations or uninstallations of packages by directly querying the installation events.

The following tables summarize the typical uses of investigations related to packages. Download all the investigations and import them into Finder to try them out.

Retrieving devices

Investigation name	Condition	Aggregate condition
Devices with a specific package	Package Name is "abc"	-
Devices without a specific package	Package Name is "abc"	Number of packages = 0
Devices with two specific packages	Package Name is "abc", publisher is "ABC", version is "123", type "program" or Package Name is "xyz", publisher is "XYZ", version is "789", type "program" NOTE: A package is uniquely identified by its name, publisher, version and type.	Number of packages = 2

Retrieving installation events

Investigation name	Condition	Aggregate condition
Installation of a specific package	Package Name is "abc" and Operation Type is "installation"	-
Uninstallation of a specific package	Package Name is "abc" and Operation Type is "uninstallation"	-

Retrieving packages

Investigation name	Condition	Aggregate condition	Order by
Least used packages	-	-	Number of devices is ascending
Most used packages	-	-	Number of devices is descending
Packages installed on fewer than 5 devices (but at least installed on one device)	-	Number of devices is fewer or equal to 5	-