Has anyone had any luck capturing last used date or any usage data for Think-Cell using ACC?

[louisesmith]

We have ACC installed on our end user windows desktop and laptops. We use an application called Think-cell in our company, it's mainly used with excel and powerpoint, its an add-on to these applications. 

Has anyone had success capturing usage data from Think-cell, or from other Office add-ons?

I'm trying to work out whether there is a technical constraint on ACC/Osquery capturing add-on usage in general, or whether we have missed a trick with configuration.

Thanks

[Tanushree Maiti]

Hi @louisesmith 

As per KB2550372 ,

How ACC Collects "Last Used" Data on Windows

ACC utilizes OSQuery to gather Windows software last used information through the following command:

osqueryi.exe --config_path "" --json --logger_min_status 1 "select p.path, p.last_execution_time, p.count, u.username from users u CROSS JOIN userassist p on p.sid=u.uuid order by p.last_execution_time desc;"

This command queries the Windows UserAssist table below, to retrieve the 'last_execution_time' values;

"\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\UserAssist"

For all applications which have a last_execution_time value in this table the data is extracted and returned in the check payload. There is no option to filter inside the check. 

Configuration Options and Limitations

The ServiceNow instance provides filtering capabilities through the following methods; 

Reclamation Rules

If a reclamation rule exists for the last_used_date metric for specific software it will persist the last_used_date into the corresponding [cmdb_sam_sw_install] record

System Property Control

lf there is not a Reclamation Rule present for the returned software, it checks the 'sn_acc_vis_content.disable_sam_reclamation_rules_for_licensable_softwares' system property

• When set to true and the product IS licensable: Persist the last_used_date into the corresponding [cmdb_sam_sw_install] record 
• When set to true AND the product IS NOT licensable: Do not persist last_used_date 
• When set to false: Do not persist last_used_date 

Also refer:  How to get data about last used date of a software using ACC