Use Nexthink Query Language (NQL) in the Investigations module to access software metering data and other relevant information.
NQL data structure
The software_metering.events table contains software usage data. Each event has a resolution of 1 week. The retention of this data is 90 days.
Examples of NQL queries
Get a list of users underusing the desktop-based software, for example, using it less than two hours in the last 90d.
Users during past 30d
| with software_metering.events during past 90d
| where meter_configuration.name == "*office*"
| compute desktop_app_usage = desktop_focus_time.sum()
| where desktop_app_usage != NULL and desktop_app_usage < 2h
| list user.name, desktop_app_usage
Get a list of devices with an application package installed but no usage of the application in the last 90d.
Devices during past 30d
| include software_metering.events during past 90d
| where meter_configuration.name == "visio"
| compute desktop_app_usage = desktop_focus_time.sum()
| include package.installed_packages
| where Package.name == "*visio*"
| where package.type == program
| compute packages_installed = device.count()
| where desktop_app_usage == NULL and packages_installed > 0
| list device.name, desktop_app_usage, packages_installed
If web usage time is not enabled: get a list of users who have accessed the web-based software at least once.
users during past 30d
| with software_metering.events during past 90d
| where meter_configuration.name == "*miro*"
| where web_is_used == TRUE
| compute event_where_web_was_used = count()
| where event_where_web_was_used > 0
| summarize users_using_application = count()
