Yes usually by going through which old machines, like you said, that are no longer connecting to the Harmony Endpoint Management Server and have been offline for a long time now.
The other option and what we could look at is running a database query (psql query) to understand how many licenses each machine is using.
There could be a situation where there are machines using multiple DA/Container licenses and multiple Software Blade license if machine have been reimaged or our client has been uninstalled and reinstalled multiple on these machine but a 'reset computer data' has not been done for there machines in the Smart Endpoint Console or Harmony Endpoint Web Management Portal as part of the reimaging process or client uninstall process. Each client should only be using 1 DA/Container license and 1 Software Blade license per blade being used.
Please run this psql query and provide the output file, /home/admin/Licenses_being_used_per_machine.txt, in a direct message to me, so the information is not public, and I will review it and let you know if this could be part of the issue and what the next steps would be.
psql -p 18272 uepm endpoint -c "select distinct device.common_name, device_license.blade_name from device_license inner join device on device.nid=device_license.nid join license on license.licuid=device_license.licuid order by common_name;" >> /home/admin/Licenses_being_used_per_machine.txt
If this is not a Harmony Endpoint On-Premise Server/Setup but a Harmony Endpoint Cloud/EPMaaS Server/Setup please let me know. If it is a Harmony Endpoint Cloud/EPMaaS Server/Setup then I can connect to the server and get the data myself.
Justin Cortez
Technology Leader | Endpoint Cyber Security Products | Americas Endpoint Team
