Apps Monitor - Technical Reference

Module: Certero for Enterprise ITAM > Apps Monitor
Codebase: Application Server\Website\CerteroWebApp\Controllers\Metered*.cs
Database Schema: C_Data\AppsMonitor
Version: 8.8+

Overview

Apps Monitor (AppsMon) is the application usage monitoring module of Certero for Enterprise ITAM. It tracks software usage across Windows endpoints to identify unused or underutilized software, supporting license optimization and cost reduction initiatives.

The module operates through the Certero Client Agent installed on Windows computers. The agent performs two key functions:

1. File Scanning - Discovers executable files (.exe) resident on computers

2. File Metering - Monitors actual execution of files by logged-on users

This dual approach provides both a complete inventory of potential software usage and actual usage data, enabling accurate identification of shelfware and optimization opportunities.

Navigation

Menu Path: Main Menu → Apps Monitor → [Files | Computers | Users | Tags]

Direct URL Patterns:

• Files: /CerteroWebApp/MeteredFile

• Computers: /CerteroWebApp/MeteredComputer

• Users: /CerteroWebApp/MeteredUser

• Tags: /CerteroWebApp/MeteredTag

Key Concepts

Data Model

Primary Entities

Entity Relationships

Data Views

User Interface

Screen: Files

Navigation: Main Menu → Apps Monitor → Files

Purpose: Summary list of all discovered executable files across monitored Windows computers.

Key Columns:

Actions Available:

Row Expansion Details:

When expanding a file row, the following additional details are displayed:

• Version (all versions found)

• Path (all paths where file exists)

• Description (all descriptions found)

Note: Multiple values may appear in a single row as the grid groups by filename only.

Screen: Computers

Navigation: Main Menu → Apps Monitor → Computers

Purpose: Computer-centric view of file usage data.

Key Columns:

Actions Available:

Screen: Users

Navigation: Main Menu → Apps Monitor → Users

Purpose: User-centric view of file usage data.

Key Columns:

Actions Available:

Screen: Tags

Navigation: Main Menu → Apps Monitor → Tags

Purpose: Custom tag management for organizing and categorizing files.

Key Columns:

Business Logic

File Scanning Process

Trigger: Scheduled by Certero Client Agent (default: weekly)

Steps:

1. Agent scans configured drives for executable files (.exe)

2. File metadata extracted (name, version, description, company, product)

3. Results uploaded to Endpoint Server

4. Data aggregated into MeteredFile table

5. Previous scan data retained for comparison

Exceptions Applied:

• System directories excluded (Windows, Program Files system components)

• Temporary files excluded (.tmp, ~)

• Remote support applications excluded (WebEx, Bomgar, Zoom)

Outcome: Complete inventory of executable files available on each computer.

File Metering Process

Trigger: Real-time monitoring via mini-filter driver (cmflt.sys)

Steps:

1. Mini-filter driver intercepts file execution events

2. Event captured with timestamp, user context, file details

3. Data batched and uploaded to Endpoint Server (default: every 2 hours)

4. Usage statistics calculated and updated in database

Data Captured:

• File executed

• User who executed

• Computer where executed

• Device name (for remote sessions)

• Timestamp

Outcome: Continuous record of actual software usage.

Usage Percentage Calculation

Formula:

Constraints:

• Maximum measurement period: 90 days

• Starts from first detection date if less than 90 days

Example:

• File discovered 30 days ago

• Used on 15 of those days

• % Used = (15 / 30) × 100 = 50%

API Reference

Endpoints

OData Query Support

All endpoints support standard OData query parameters:

• $filter - Filter results

• $orderby - Sort results

• $top / $skip - Pagination

• $select - Field selection

• $expand - Related entity expansion

Configuration

Enabling Apps Monitor

Apps Monitor must be enabled per-computer via Configuration Rules.

Navigation: Main Menu → Settings → Configuration Rules → [Rule Name] → Properties → Modules

Steps:

1. Navigate to Configuration Rules

2. Select or create a rule targeting desired computers

3. Click "Properties"

4. Under Modules, click "Enabled" against Apps Monitor

5. Click "Save"

6. Wait for agent to receive updated configuration

Note: License required. Unlicensed modules appear greyed out.

Transient VM Configuration

For non-persistent VDI environments, additional configuration is required.

Issue: Transient VMs lose data on reboot before upload.

Solution: Configure more frequent data uploads or use persistent storage for agent data.

See: "How To Configure Apps Monitor for Transient Virtual Machines" in CUP documentation.

Troubleshooting

Issue: Computer not appearing in Apps Monitor

Symptoms:

• Computer has agent installed but not visible in Apps Monitor → Computers

• No file usage data for specific computer

Cause: Apps Monitor module not enabled for that computer's configuration rule.

Resolution:

1. Navigate to Main Menu → Settings → Configuration Rules

2. Identify rule targeting the affected computer

3. Verify Apps Monitor is enabled under Properties → Modules

4. If disabled, enable and save

5. Wait for agent to sync (up to 24 hours) or manually trigger sync

Issue: File usage not being recorded

Symptoms:

• Files appear in scan but no usage data

• "Last Run" column shows no data

Cause:

• File may be in exception list

• Mini-filter driver not loaded

• Agent service not running

Resolution:

1. Check if file matches exclusion patterns (see File Scan & File Metering Exceptions)

2. Verify agent service is running: services.msc → Certero Agent

3. Check mini-filter status: fltmc command

4. Review agent logs: C:\ProgramData\Certero\Agent\Logs\

Issue: % Used showing unexpected values

Symptoms:

• Usage percentage seems too high or too low

• Values don't match expected usage patterns

Cause: Misunderstanding of calculation basis.

Resolution:

1. Remember % Used is based on days since first detection, not 90 days

2. For recently discovered files, percentage is over shorter period

3. Check "First Detected" date to understand measurement window

4. Usage is per-user, per-computer - aggregate may differ from individual

Issue: Data hashing enabled - cannot see file details

Symptoms:

• File details appear hashed/anonymized

• Cannot identify specific executables

Cause: Data hashing feature enabled for privacy compliance (v8.7+).

Resolution:

1. Data hashing is intentional privacy feature

2. Contact administrator to disable if business need exists

3. Hashing settings found in configuration rules

Integration Points

Dynamic Groups

Apps Monitor data can be used in Dynamic Group criteria:

• File Usage (RAW) - Individual usage events

• File Usage (Summary) - Aggregated usage metrics

Use Case: Create group of computers with unused software for license reclamation.

Governance Filters

Usage criteria available in governance filters for policy enforcement.

Reports

Usage data can be included in scheduled reports:

• Usage by file

• Usage by computer

• Usage by user

• Unused software identification

Dashboards

Apps Monitor widgets available for dashboard configuration:

• Top used applications

• Unused software summary

• Usage trends

Related Documentation

• How to enable Apps Monitor using Configuration Rules | v8+

• Apps Monitor - Understanding the Histogram | 8.8+

• Apps Monitor - File Scan & File Metering Exceptions | 8.8+

• Apps Monitor - Example Use Cases | 8.8+

• How To Configure Apps Monitor for Transient VMs | v8.8+

Technical Reference

Key Files

Database Objects

Permission Requirements

Revision History