We are removing a specific piece of installed software from Windows servers across our enterprise. I ran an Orion report and queried Orion.AssetInventory.Software via SWQL to try to get an inventory of how many servers still need to be addressed, and servers that had the software removed are still showing up.
Spot-checking a few that appear in the report/query, the software no longer appears in Installed Programs on the node. Inventory collections are running as expected, once per day.
Is it possible that Orion is finding some remnant of the software on the nodes if it happens to not be getting completely "removed"? Maybe in the registry somewhere? I'm not sure what it queries on the nodes to populate that table and if that's the case, or there may be an issue with the inventory collection more broadly.
Ideas?