I currently logged the following data
Description=Windows Support Tools
InstallDate=20120126
InstallDate2=NULL
Name=Windows Support Tools
Version=5.2.3790.3959
wmi_type=InstalledSoftware
However the problem I have when evaluating the data is the Name field will only show the first word of the string "Windows" instead of "Windows Support Tools", is there any way to get this field to show as a single value?
Currently I am running the query
sourcetype="WMI:InstalledSoftware" | table host Name Version Description
And it returns this
host Name Version Description
1 PAVFEX01 Windows 5.2.3790.3959 Windows
2 PAVFEX01 Microsoft 4.1.10329.0 Microsoft
3 PAVFEX01 Microsoft 9.0.30729.4148 Microsoft
4 PAVFEX01 Microsoft 3.3.11314.470 Microsoft
5 PAVFEX01 Microsoft 3.4.2350.0 Microsoft
6 PAVFEX01 VMware 8.6.5.11214 VMware
7 PAVFEX01 Microsoft 14.1.218.15 Microsoft
8 PAVFEX01 Microsoft 3.3.4604.001 Microsoft
9 PAVFEX01 Microsoft 8.1.6416.0 Microsoft
10 PAVFEX01 Microsoft 14.2.247.0 Microsoft
... View more