How to monitor Direction for WMI Win32_RemoveFileAction ?

With IPHost Network Monitor you can run WMI Direction monitoring of various devices in your network.

To create a WMI monitor for Direction, provide host name (it must be a Windows host) and specify custom WQL query:

SELECT Direction FROM Win32_RemoveFileAction

The Direction property indicates whether a particular CIM_Action object is part of a sequence of actions to transition the current software element to its next state, such as "Install" or to remove the current software element, such as "Uninstall".

The RemoveFiles action uninstalls files previously installed by the InstallFiles action. Each of these files is 'gated' by a link to an entry in the Component class; only those files whose components are resolved to the iisAbsent Action state, or the iisSource Action state IF the component is currently installed locally, will be removed. The RemoveFiles action can also remove specific author-specified files that weren't installed by the InstallFiles action. Each of these files is 'gated' by a link to an entry in the Component class; those files whose components are resolved to any 'active' Action state (i.e. not in the 'off', or NULL, state) will be removed (if the file exists in the specified directory, of course). This implies that removal of files will be attempted when the gating component is first installed, during a reinstall, and again when the gating component is removed.

IPHost Network Monitor is an advanced and easy tool for monitoring LAN and WAN networks, network servers, workstations and TCP/IP devices. Use IPHost Network Monitor to monitor your servers, domains, computers and devices.