What exactly is Software: Changes in the last 24 hours reporting on?

[jgiordano]

I have an endpoint (W10pro) that popped up on our "Software: Changes is the last 24 hours" report. It listed all of the software installed on that workstation. The Installdate column is accurate, although LastChanged is showing 03/27/2020 @ 08:02:22am. At first glance, I figured this was due to MS updates, although 3rd party applications are also showing the same "LastChanged" time stamp.

Contacting that user and then remoting in to the workstation to verify, there was no history of updates for MS or 3rd party apps at that time. The only thing the user did was turn their workstation on around that time.

What exactly qualifies as LastChanged? No other workstation is reporting this behavior today, although Last 7 days shows similar behavior in other workstations. Does this somehow coincide with a user turning on or restarting their workstation? If so, what is the intended purpose/importance of this report?

At first glance, and not being well versed enough in SQL to dissect the report in the editor, I would think this report alerts to changes in software such as updates, installs, uninstalls; you know, things an admin would want to know in relation to what may trigger an investigation into a user not adhering to approved software guidelines and such.

[FrankSc]

Hello,

As an extra note to the last remark, you can also pick the report queries from the report library (https://www.lansweeper.com/report/). Copying the query from there and use that in your Lansweeper installation should give you also the correct report(s).
All built-in reports can be found on that link with the correct query.

[brandon_jones]

Could you please share how we can make the edit? I'm not to familiar with SQL, but I would like to make this report work correctly.

[Agert]

Brandon wrote:
Could you please share how we can make the edit? I'm not to familiar with SQL, but I would like to make this report work correctly.

Pull up the
Software: Changes in the last 24 hours report.
Then on left menu select edit report.

Then in the report editor find the tblsoftware table and softid field uptop. Click field and drag to make link to tblsoftwarehis table softid field.

save an run

[brandon_jones]

Agert wrote:

Brandon wrote:
Could you please share how we can make the edit? I'm not to familiar with SQL, but I would like to make this report work correctly.

Pull up the
Software: Changes in the last 24 hours report.
Then on left menu select edit report.

Then in the report editor find the tblsoftware table and softid field uptop. Click field and drag to make link to tblsoftwarehis table softid field.

save an run

Thanks! Now that report is actually useful. I'll have to make the same change in the 7 day report as well. have you let lansweeper know about this?

[Agert]

Yes I let support know.

They stated

We adjusted the bulk of the built-in reports in v8.0 in order to have information displayed in a more uniform way. Unfortunately, there are indeed some issues (e.g. incorrect and/or missing joins) with some of these changed reports, including the 'Software: Changes in the last 24 hours' and 'Software: Changes in the last 7 days' reports. We will revert all these changes in an upcoming update and revise the reports again at a later stage

[Agert]

I finally took some time to try and fix this myself. I had to create a relationship link from tblSoftware > tblSoftwareHist for field softID
This resolved issue as previously it was pulling all software from a machine on changes instead of just changed software

[brandon_jones]

I am seeing similar results in this report as well. I really wish someone would explain it.

[MCBowman]

Has there been any solution to this issue? My "Software Changes in the last 24 hours" reports 94,000+ lines for a few hundred endpoints. There are many duplicates showing no difference in the software/version/install dates/change dates. Looking at my test system, it has 1536 lines, showing the same version of software being "removed" and "reinstalled" about two dozen or so times. Below is an example of just one application:

Software: Changes in the last 24 hours(1-250/1536)Display:
AssetName Domain UserName UserDomain Type IPAddress IPLocation Manufacturer Model OS SP Lasttried Lastseen +/- Software Version Publisher Installdate LastChanged
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 11/12/2018 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 11/12/2018 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 05/28/2019 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 04/07/2020 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 11/12/2018 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 02/04/2020 06/11/2020 10:12:33
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/11/2020 06/11/2020 10:12:33
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 04/07/2020 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 05/28/2019 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 11/12/2018 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 11/12/2018 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 05/28/2019 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 - Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 05/28/2019 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21
SandboxLaptop MyDomain Marc.Bowman MyDomain Windows 192.168.1.18 MyOffice Lenovo ThinkPad T560 Win 10 0 06/11/2020 14:23:29 06/11/2020 14:23:29 + Windows Installer Clean Up 3.00.00.0000 Microsoft Corporation 06/10/2020 16:59:21

The software was not changed yesterday at all. I don't remember when this started happening, but I think it was late 2019 (I keep up-to-date on all new versions).

Any ideas?

[anpatterson03]

I am wondering the same thing. Something in the way that report pulls data in the last version or two has changed. I get that report emailed to me daily for review and it used to be a couple hundred changes from various updates and such. Now it's 10,000+ changes every day.