Reference: Tanium Status and Support menus

TanOS includes the following diagnostic menus.

  Menu Usage
Status System Status View OS or network status.
Tanium Status View the status of Tanium processes.
Appliance Status View appliance version information, OS status, or hardware status.
Tanium Support Tanium Log Files Review logs. See Review Tanium Core Platform logs and Review Tanium solution module logs.
Database Operations Run diagnostics or queries. See Use Database Operations menus.
Run Network Diagnostics Use ping, port tests, nslookup, and IPsec check utilities.
Run Health Check Check the status of network services and Tanium services. See Run the Health Check.
Display Last Scheduled Health Check Results A health check is run automatically every 15 minutes. Use this option to view previous results.
Appliance Hardware Report Check hardware status.
Run TSG Run the Tanium™ Support Gatherer (TSG) scripts. The output is written to a file you can share with Tanium Support. See Run Tanium Support Gatherer.
Run Tcpdump Run tcpdump for the selected network interface. Host/IP and port filters are supported. See Run Tcpdump.
Performance Monitoring Use SAR commands, snapshots, and more. See Use the Performance Monitoring menu.
Advanced Support Copy Core Files Copy any core dump files to the /outgoing folder so they can be copied by the tancopy user or uploaded directly to a specified SFTP location.
Generate Process Memory Dump Generate a process dump from a running Tanium process and copy it to the /outgoing folder.
Directory Space Usage View disk usage per directory.

 

Use the status menus

System Status shows OS and network status. Tanium Status shows Tanium™ component status. Appliance Status shows appliance version information, OS status, or hardware status.

tanadmin: View system status

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 4 to go to the Status menu. ClosedView screen
  3. Enter 1 to go to the System Status menu. ClosedView screen
  4. Enter 1 to view OS status, or enter 2 to view network status.

tanuser: View system status

  1. Sign in to the TanOS console as a user with the tanuser role.
  2. Enter 1 to go to the System Status menu. ClosedView screen
  3. Enter 1 to view OS status, or enter 2 to view network status.

tanadmin: View Tanium status

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 4 to go to the Status menu. ClosedView screen
  3. Enter 2 to go to the Tanium Status menu. ClosedView screen

tanuser: View Tanium status

  1. Sign in to the TanOS console as a user with the tanuser role.
  2. Enter 2 to go to the Tanium Status menu. ClosedView screen
  3. Use the menu to view Tanium service status.

tanadmin: View appliance status

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 4 to go to the Status menu. ClosedView screen
  3. Enter 3 to go to the Appliance Status menu. ClosedView screen
  4. Use the menu to view appliance version information, OS status, or hardware status.

tanuser: View appliance status

  1. Sign in to the TanOS console as a user with the tanuser role.
  2. Enter 3 to go to the Appliance Status menu.
  3. Use the menu to view appliance version information, OS status, or hardware status.

Use the Tanium Support menu

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu. ClosedView screen

See Troubleshooting for information on the reports available in this menu.

Use the Advanced Support menu

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu. ClosedView screen
  3. Enter X to go to the Advanced Support menu. ClosedView screen
  4. Use the menu to copy core files, generate a process dump for a Tanium process, or view directory space usage.

Copy Core Files

To upload the Core Files directly to an SFTP destination from the /outgoing directory, you must add the tanadmin user's public SSH key to the SFTP user's authorized keys on the remote host. For information, see Manage SSH keys.

  1. Sign in to the TanOS console as a user with the tanadmin role.

  2. Enter 3 to go to the Tanium Support menu.

  3. Enter X to go to the Advanced Support menu.
  4. Enter 1 to go to the Copy Core Files screen.
  5. Enter the line number of the core files to copy.

    TanOS generates a ZIP file containing the compressed core files and uploads it to the /outgoing directory.

  6. To upload the generated file to an SFTP location using TanOS, enter Yes and follow the prompts to enter the SFTP host IP or fully qualified domain name (FQDN), remote user name, and destination directory and file name.

Use Database Operations menus

If you encounter issues with the Tanium deployment, Tanium Support might direct you to perform database operations.

Database operations are available on the Tanium Server and Tanium Module Server. In an All-In-One deployment, database operations apply only to the Tanium Server.

View the Postgres log file

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu. ClosedView screen
  3. Enter 3 to go to the Database Operations menu. ClosedView screen
  4. Enter 1 to go to the Select File menu. ClosedView screen
  5. Enter the line number for the postgres.log file, and use the menu to view the log or copy it to the /outgoing folder. ClosedView screen

View Postgres configuration files

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter 2 to go to the Select File menu. ClosedView screen
  5. Use the menu to review or modify the configuration.

View Postgres control data

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter 3 to view Postgres control data. ClosedView screen

Enable full Postgres audit log

Postgres logs are very rarely useful in troubleshooting appliance or platform issues. Audit logging is disabled by default. When enabled, Postgres logging can consume inordinate disk space. For best results, enable audit logging only when debugging.

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter 4 and follow the prompts to enable audit logging. ClosedView screen

Manage the database memory plan

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter D to go to the DB Tuning menu. ClosedView screen
  5. Use the menus to view or make changes to the database memory plan.

    You must select the same database memory plan for both Tanium Servers in a cluster, or for both an active and standby Module Server. A Tanium Server and a Module Server are not required to have the same memory plan.

Run the Postgres top command

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter M to view results of the top command. ClosedView screen
  5. Enter Q to return to the Database Operations menu.

Query the tanium database

The Manage Queries menu includes predefined queries that can be useful during troubleshooting.

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter Q to go to the Manage Queries menu. ClosedView screen
  5. Enter S to go to the Select Query menu. ClosedView screen
  6. Use the menu to select a predefined query and return to the Manage Queries menu.
  7. Enter X to run the query and save the results to the /outgoing folder. ClosedView screen
  8. Enter Q to view query results. ClosedView screen
  9. Enter Q to return to the Manage Queries menu.

View replication status

  1. Sign in to the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter S to view the status.

Initiate database server failover

  1. Sign in to the TanOS console of the appliance with the secondary database as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter F to go to the Database Server Failover menu.
  5. Follow the prompts to initiate the failover.

Use the Network Diagnostics menu

Use the Network Diagnostics menu to run basic diagnostic procedures.

Ping a remote system

  1. Sign in to the TanOS console of the appliance as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 4 to go to the Run Network Diagnostics menu.
  4. Enter F to open the Ping Remote System page.
  5. Enter the IP address or fully qualified domain name (FQDN) of the system to ping to view connection information.

Test a connection using a remote port

The Test Remote Port screen allows you to attempt a connection to a given destination and port using TCP.

  1. Sign in to the TanOS console of the appliance as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 4 to go to the Run Network Diagnostics menu.
  4. Enter 2 to open the Test Remote Port (TCP) screen.
  5. Enter the IP address or FQDN of the destination to test.
  6. Enter the port number for the connection.
    The TanOS console indicates whether the appliance can successfully connect using the specified port.

Trace the connection path to a destination

Use the Trace Path screen to run a traceroute command to a remote destination using a specified connection protocol.

  1. Sign in to the TanOS console of the appliance as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 4 to go to the Run Network Diagnostics menu.
  4. Enter 3 to go to the Trace Path menu.
  5. Enter the protocol to use for the connection, the FQDN or IP address of the destination, and the port to view the connection path between the appliance and the destination.

Resolve a host name

  1. Sign in to the TanOS console of the appliance as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 4 to go to the Run Network Diagnostics menu.
  4. Enter 4 to go to the Resolve Name screen.
  5. Enter the FQDN to find its IP address.

Check IPSEC

  1. Sign in to the TanOS console of the appliance with the secondary database as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter 5 to view information about any active IPsec tunnels..

Listening ports

  1. Sign in to the TanOS console of the appliance with the secondary database as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter 6 to view a list of all detected listening ports.

Show firewall

  1. Sign in to the TanOS console of the appliance with the secondary database as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter 7 to view firewall details.

Use the Performance Monitoring menu

You can use the Performance Monitoring menu to view resource usage.

Run a SAR command

  1. Sign in to the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu. ClosedView screen
  4. Enter 1 to go to the SAR command menu. ClosedView screen
  5. Use the menu to issue a command. The results of the command are returned to the screen. ClosedView screen

Export a SAR snapshot

  1. Sign in to the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu.
  4. Enter 2 to take a five second snapshot of SAR data and export it to the /outgoing folder. ClosedView screen
  5. Use SFTP to copy the snapshot file from the /outgoing directory on the appliance to your management computer.

Export a SAR performance data

  1. Sign in to the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu.
  4. Enter 3 to collect the complete set of SAR data files for the last 30 days and export it to a ZIP file in the /outgoing folder. ClosedView screen
  5. Use SFTP to copy the snapshot file from the /outgoing directory on the appliance to your management computer.

Export all SAR files

  1. Sign in to the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu.
  4. Enter 4 to collect all SAR files into a single file and export it to the /outgoing folder. ClosedView screen
  5. Use SFTP to copy the snapshot file from the /outgoing directory on the appliance to your management computer.


Run the iotop command

  1. Sign in to the TanOS console of the appliance as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu.
  4. Enter I to monitor input/ouput usage for the appliance.
  5. Enter Q to return to the Performance Monitoring menu.

Run the perf top command

  1. Sign in to the TanOS console of the appliance as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu.
  4. Enter P to monitor CPU usage for the appliance.
  5. Enter Q to return to the Performance Monitoring menu.

Run the htop command

  1. Sign in to the TanOS console of the appliance as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu.
  4. Enter T to monitor processes for the appliance.
  5. Enter Q to return to the Performance Monitoring menu.