In Endpoint Central, how do I add criteria to a custom package as to whether or not it should be run on a computer?

This concept is called "relevance" in HCL BigFix.

For instance, I need to update the certificate used by Splunk Forwarder for Windows computers that have the old cert.

In BigFix I would have these criteria:

Windows machine
the SplunkForwarder service exists
the indexer.pem file exists, and line x begins with the string "yyyyyyy
"

Once these criteria are set, the only computers that I can
run the patch on are the ones that meet the criteria. The others do not show up.

The criteria could also be used for software upgrades on custom packages that EC does not have available (like our internal builds of Symantec Endpoint Protection or FileZilla Server
). I do not want to run those software installs (or upgrades) on a system unless it meets the criteria.

Thanks.