We have a custom report that delivers a list of endpoints that have more than 4 Evaluating actions while hosting a Running action. Recently we noted that some of the Evaluating actions are Stopped or Expired actions and wanting to exclude them from the count indicating a hung Running action. Below is the relevance we use presently and wondering if anyone can amend to exclude Stopped and Expired actions showing Evaluating.
q: (name of it, operating system of it, (concatenation " " of unique values of (values of property results whose (name of property of it = “Company”) of it as string)), (concatenation “;” of names of actions of action results whose (status of it equals bes action status running) of it)) of bes computers whose (number of action results whose (status of it equals bes action status evaluating) of it > 4)
Thanks in advance.