Add the ability to find unused software

noahtalerman commented 3 years ago

Goal

As a Fleet user, I want to know which software is unused on my hosts so that I can modify software subscriptions at my organization to ultimately lower software related expenses.

Solution

Step 1: Create queries to detect unused software and add these to Fleet's Standard query library.

Step 2: Determine how these detections make their way into the Fleet UI. Potential solutions:

Host details page: Some indication of unusedness next to packages that are unused in software inventory table
Bubble up these as "issues"
Probably can implement the first version of this as a detection

Resources

CMD+F for "unused software licenses" in https://docs.google.com/document/d/1aibX9eSMQVJeHzqeUXYqgyI7bbvlJz6pcvDh_TgCtD8/edit# to see an example osquery query to do this

mikermcneil commented 2 years ago

@noahtalerman I added example osquery SQL for this and staged for discussion in an upcoming huddle

chiiph commented 2 years ago

@noahtalerman with the addition of last used software, we can probably do this in the UI based on the results of this data.

fleetdm / fleet