Reference: Tanium Status and Support menus
TanOS includes the following diagnostic menus.
| Status |
System Status |
Display OS or network status. |
| Tanium Status |
Displays the status of Tanium processes. |
| Appliance Status |
Display appliance version information, OS status, or hardware status. |
| Tanium Support |
Tanium Log Files |
Review logs. See Review Tanium Core Platform logs and Review Tanium solution module logs. |
| Database Operations |
Run diagnostics or queries. See Use Database Operations menus. |
| Run Network Diagnostics |
Use ping, port tests, nslookup, and IPsec check utilities. |
| Run Health Check |
Check the status of network services and Tanium services. See Run the Health Check. |
| Display Last Scheduled Health Check Results |
A health check is run automatically every 15 minutes. Use this option to view previous results. |
| Appliance Hardware Report |
Check hardware status. |
| Run TSG |
Run the Tanium™ Support Gatherer (TSG) scripts. The output is written to a file you can share with your TAM or Tanium Support. See Run Tanium Support Gatherer. |
| Run Tcpdump |
Run tcpdump for the selected network interface. Host/IP and port filters are supported. |
| Performance Monitoring |
Use SAR commands and snapshots. See Use the Performance Monitoring menu. |
| Advanced Support |
Copy Core Files |
Copy any core dump files to the /outgoing folder so they can be copied by the tancopy user. |
| Generate Process Memory Dump |
Generate a process dump from a running Tanium process and copy it to the /outgoing folder. |
| Directory Space Usage |
Display disk usage per directory. |
Use the Status menus
System Status shows OS and network status. Tanium Status shows Tanium™ component status. Appliance Status shows appliance version information, OS status, or hardware status.
tanadmin: Display system status
- Log into the TanOS console as a user with the tanadmin role.
The TanOS console displays the tanadmin menu. 
View screen
------------------------------------------------------
>>> tanadmin menu <<<
1: Tanium Installation Menu
2: Tanium Operations Menu
3: Tanium Support Menu
4: Status Menu
A: Appliance Configuration Menu
B: Appliance Maintenance Menu
C: User Administration Menu
P: Password change (current user)
Q: View End User License Agreement (EULA)
F: Flexible Menu Search
@: About this Appliance
H: Help
Z: Log out
------------------------------------------------------
- Enter 4 to go to the Status menu. View screen
------------------------------------------------------
>>> Status <<<
1: System Status Menu
2: Tanium Status Menu
3: Appliance Status Menu
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter 1 to display the System Status menu. View screen
------------------------------------------------------
>>> System Status <<<
1: OS Status
2: Network Status
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter 1 to display OS status, or enter 2 to display network status.
tanuser: Display system status
- Log into the TanOS console as a user with the tanuser role.
The TanOS console displays the tanuser menu. View screen
------------------------------------------------------
>>> tanuser menu <<<
1: System Status Menu
2: Tanium Status Menu
3: Appliance Status Menu
A: View End User License Agreement (EULA)
B: Display Last Scheduled Health Check Results
P: Password change for tanuser
S: SSH Keys for tanuser
@: About this Appliance
H: Help
Z: Log out
------------------------------------------------------
- Enter 1 to display the System Status menu. View screen
------------------------------------------------------
>>> System Status <<<
1: OS Status
2: Network Status
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter 1 to display OS status, or enter 2 to display network status.
tanadmin: Display Tanium status
- Log into the TanOS console as a user with the tanadmin role.
- From the tanadmin menu, enter 4 to go to the Status menu. View screen
------------------------------------------------------
>>> Status <<<
1: System Status Menu
2: Tanium Status Menu
3: Appliance Status Menu
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter 2 to display the Tanium Status menu. View screen
------------------------------------------------------
>>> Tanium Status <<<
# Service State Status
1 ipsec enabled started
2 postgresql-11 enabled started
3 postgresql-9.5 enabled started
4 slapd enabled started
5 taniummoduleserver enabled started
6 taniumserver enabled started
Select a Tanium service line number to retrieve details.
Note: Any installed modules have been removed from this listing
H: Help
R: Return to previous menu
------------------------------------------------------
tanuser: Display Tanium status
- Log into the TanOS console as a user with the tanuser role.
- From the tanuser menu, enter 2 to go to the Tanium Status menu. View screen
------------------------------------------------------
>>> Tanium Status <<<
# Service State Status
1 ipsec enabled started
2 postgresql-11 enabled started
3 postgresql-9.5 enabled started
4 slapd enabled started
5 taniummoduleserver enabled started
6 taniumserver enabled started
Select a Tanium service line number to retrieve details.
Note: Any installed modules have been removed from this listing
H: Help
R: Return to previous menu
------------------------------------------------------
- Use the menu to show Tanium service status.
tanadmin: Display appliance status
- Log into the TanOS console as a user with the tanadmin role.
- From the tanadmin menu, enter 4 to go to the Status menu. View screen
------------------------------------------------------
>>> Status <<<
1: System Status Menu
2: Tanium Status Menu
3: Appliance Status Menu
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter 3 to display the Appliance Status menu. View screen
------------------------------------------------------
>>> Appliance Status <<<
1: Appliance Version Details
2: Appliance Status (OS)
3: Appliance Status (HW)
H: Help
R: Return to previous menu
------------------------------------------------------
- Use the menu to display appliance version information, OS status, or hardware status.
tanuser: Display appliance status
- Log into the TanOS console as a user with the tanuser role.
- From the tanuser menu, enter 3 to display the Appliance Status menu.
- Use the menu to display appliance version information, OS status, or hardware status.
Use the Tanium Support menu
- Log into the TanOS console as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu. View screen
------------------------------------------------------
>>> Tanium Support menu <<<
1: Tanium Log Files
2: Tanium Module Log Files
3: Database Operations
4: Run Network Diagnostics
5: Run Health Check
6: Display Last Scheduled Health Check Results
7: Appliance Hardware Report
A: Run TSG (Tanium Support Gatherer)
B: Run Tcpdump
P: Performance Monitoring
X: Advanced Support
H: Help
R: Return to previous menu
------------------------------------------------------
Use the Advanced Support menu
- Log into the TanOS console as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu. View screen
------------------------------------------------------
>>> Tanium Support menu <<<
1: Tanium Log Files
2: Tanium Module Log Files
3: Database Operations
4: Run Network Diagnostics
5: Run Health Check
6: Display Last Scheduled Health Check Results
7: Appliance Hardware Report
A: Run TSG (Tanium Support Gatherer)
B: Run Tcpdump
P: Performance Monitoring
X: Advanced Support
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter X to go to the Advanced Support menu. View screen
------------------------------------------------------
>>> Tanium Support -> Advanced Menu <<<
Attention: The options in this menu can effect performance
Please consult your TAM before utilizing the below options.
1: Copy Core Files
2: Generate Process Memory Dump
3: Directory space usage
D: Database Query Management
H: Help
R: Return to previous menu
------------------------------------------------------
- Use the menu to copy core files, generate a process dump for a Tanium process, or view directory space usage.
Use Database Operations menus
If you encounter issues with the Tanium deployment, your TAM may direct you to perform database operations.
Display the Postgres log file
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu. View screen
------------------------------------------------------
>>> Tanium Support menu <<<
1: Tanium Log Files
2: Tanium Module Log Files
3: Database Operations
4: Run Network Diagnostics
5: Run Health Check
6: Display Last Scheduled Health Check Results
7: Appliance Hardware Report
A: Run TSG (Tanium Support Gatherer)
B: Run Tcpdump
P: Performance Monitoring
X: Advanced Support
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter 3 to go to the Database Operations menu. View screen
------------------------------------------------------
>>> Tanium Support menu -> Database Operations <<<
1: Display Postgres log file
2: View Postgresql config files
3: Display Postgres Control Data
4: Enable Full Postgres Audit logs
D: Database Memory Plan
M: Monitor Database
Q: Manage Database Queries
S: Replication Status
F: Database Server Failover
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter 1 to display the Select File menu. View screen
>>> Tanium Support -> Log files -> Select File <<<
# File name
1: postgres.log
2: audit-postgres.log-2020-04-09-1586439241.gz
3: audit-postgres.log-2020-04-07-1586266262.gz
4: stdout-Apr.log
5: stdout-Mar.log
6: stdout-Feb.log
7: postgres.log-2020-03-13-1584124801.gz
8: audit-postgres.log
9: postgres.log-2020-02-21-1582299121.gz
10: audit-postgres.log-2020-03-23-1584982202.gz
11: audit-postgres.log-2020-04-08-1586357401.gz
12: audit-postgres.log-2020-04-06-1586180222.gz
13: audit-postgres.log-2020-03-26-1585229401.gz
14: postgres.log-2020-04-07-1586266262
15: audit-postgres.log-2020-03-24-1585058761.gz
Please select file by line number (enter to exit):
- Enter the line number for the postgres.log file, and use the menu to view the log or copy it to the /outgoing folder. View screen
>>> Tanium Operations -> Log files -> View -> postgres.log <<<
Attention: When using option 2 (Follow log file):
Be aware that pressing <Ctrl> + <C> is required to exit which will kill this session as well!!
1: View log (exit by pressing "q")
2: Follow log file growth (exit by pressing <ctrl> + <c>)
B: Copy to outgoing (sftp)
R: Return to main menu
Please select a line number or menu item:
Display Postgres configuration files
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter 3 to go to the Database Operations menu.
- Enter 2 to display the Select File menu. View screen
>>> Tanium Support -> Log files -> Select File <<<
# File name
1: postgresql_replication.conf
2: postgresql_lognormal.conf
3: postgresql_logging.conf
4: postgresql.conf
5: postgresql_logfull.conf
6: pg_hba.conf
7: postgresql.auto.conf
8: pg_ident.conf
Please select file by line number (enter to exit):
- Use the menu to review or modify the configuration.
Display Postgres control data
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter 3 to go to the Database Operations menu.
- Enter 3 to display Postgres control data. View screen
pg_control version number: 942
Catalog version number: 201510051
Database system identifier: 6813452830717815614
Database cluster state: in production
pg_control last modified: Thu 09 Apr 2020 02:31:02 PM UTC
Latest checkpoint location: 0/2384610
Prior checkpoint location: 0/2381B90
Latest checkpoint's REDO location: 0/23845D8
Latest checkpoint's REDO WAL file: 000000010000000000000002
Latest checkpoint's TimeLineID: 1
Latest checkpoint's PrevTimeLineID: 1
Latest checkpoint's full_page_writes: on
Latest checkpoint's NextXID: 0/3498
Latest checkpoint's NextOID: 27854
Latest checkpoint's NextMultiXactId: 1
Latest checkpoint's NextMultiOffset: 0
Latest checkpoint's oldestXID: 1825
Latest checkpoint's oldestXID's DB: 1
Latest checkpoint's oldestActiveXID: 3498
Latest checkpoint's oldestMultiXid: 1
Latest checkpoint's oldestMulti's DB: 1
Latest checkpoint's oldestCommitTsXid:0
Latest checkpoint's newestCommitTsXid:0
Time of latest checkpoint: Thu 09 Apr 2020 02:31:02 PM UTC
Fake LSN counter for unlogged rels: 0/1
Minimum recovery ending location: 0/0
Min recovery ending loc's timeline: 0
Backup start location: 0/0
Backup end location: 0/0
End-of-backup record required: no
wal_level setting: hot_standby
wal_log_hints setting: off
max_connections setting: 256
max_worker_processes setting: 8
max_prepared_xacts setting: 0
max_locks_per_xact setting: 64
track_commit_timestamp setting: off
Maximum data alignment: 8
Database block size: 8192
Blocks per segment of large relation: 131072
WAL block size: 8192
Bytes per WAL segment: 16777216
Maximum length of identifiers: 64
Maximum columns in an index: 32
Maximum size of a TOAST chunk: 1996
Size of a large-object chunk: 2048
Date/time type storage: 64-bit integers
Float4 argument passing: by value
Float8 argument passing: by value
Data page checksum version: 0
Press enter to continue
Enable full Postgres audit log
Postgres logs are very rarely useful in troubleshooting appliance or platform issues. Audit logging is disabled by default. When enabled, Postgres logging can consume inordinate disk space. We recommend you enable it only when debugging.
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter 3 to go to the Database Operations menu.
- Enter 4 and follow the prompts to enable audit logging. View screen
------------------------------------------------------
>>> Tanium Support menu -> Enable Postgres Full Audit Logging <<<
Do you want to Enable Full Postgres audit logging ? [Yes|No]: yes
Enabling Postgres audit logging
Reloading Postgres configuration
Press enter to continue
Manage the database memory plan
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter 3 to go to the Database Operations menu.
- Enter D to display DB Tuning menu. View screen
------------------------------------------------------
>>> Tanium Support menu -> Database Operations -> DB Tuning <<<
Database memory plans are pre-defined database configurations which optimize
performance based on the size (Memory) of the Tanium Server. Memory plan
configurations have been tuned for all available Tanium appliance models. For
Virtual appliances the memory plan will be selected by total amount of
available memory.
Total Server Memory: 0GB
Current Memory plan: TINY
Selected Memory plan: NONE
V: View DB Memory Plan Settings
S: Select DB Memory Plan
A: Apply DB Memory Plan
H: Help
R: Return to previous menu
------------------------------------------------------
- Use the menus to view or make changes to the database memory plan.
Run the Postgres top command
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter 3 to go to the Database Operations menu.
- Enter M to display results of the top command. View screen
last pid: 29609; load avg: 0.08, 0.03, 0.05; up 0+03:02:11 14:45:53
3 processes: 1 running, 2 sleeping
CPU states: 34.5% user, 0.0% nice, 15.0% system, 50.5% idle, 0.0% iowait
Memory: 924M used, 67M free, 46M buffers, 560M cached
DB activity: 17 tps, 0 rollbs/s, 0 buffer r/s, 100 hit%, 38 row r/s, 0 row w/s
DB I/O: 0 reads/s, 0 KB/s, 27 writes/s, 210 KB/s
DB disk: 348.7 GB total, 328.3 GB free (5% used)
Swap: 10M used, 4086M free, 924K cached
PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND
23453 postgres 20 0 4426M 50M sleep 0:08 0.20% 0.60% postgres: postgres tanium 10.10.10.55(60908) idle
29610 postgres 20 0 4421M 6496K run 0:00 0.00% 0.00% postgres: postgres postgres [local] idle
- Enter Q to return to the Database Operations menu.
Query the tanium database
The Manage Queries menu includes predefined queries that can be useful during troubleshooting.
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter 3 to go to the Database Operations menu.
- Enter Q to display the Manage Queries menu. View screen
------------------------------------------------------
>>> Tanium Support menu -> Database Operations -> Manage Queries <<<
Current Query Selected: NONE
S: Select Query
X: Execute Query
V: View Query
Q: View Query Results
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter S to display the Select Query menu. View screen
>>> Tanium Support menu -> Database Operations -> Select Query <<<
# Query Name
1 ActiveConnections
2 ActiveQueries
3 AddPurgeArchive_SP
4 ArchivingSavedQuestions
5 CreateArchiveIndexes
6 DBsizes
7 GeneralTableSizeSummary_csv
8 GeneralTableSizeSummary
9 LongRunningQueries
10 Plat420Fix
11 Plat5843Fix
12 Plat6634Fix
13 PurgeArchive_120days
14 PurgeArchive_30days
15 PurgeArchive_60days
16 PurgeArchive_7days
17 PurgeArchive_90days
18 PurgeArchiveHistory
19 RelationSizes
20 Top20TableSizes_csv
21 Top20TableSizes
22 TruncateArchive
23 Vacuum_Analyze
24 Vacuum_Full
25 Vacuum_Verbose
R: Return to main menu
Please select a line number or menu item:
- Use the menu to select a predefined query and return to the Manage Queries menu.
- Enter X to run the query and save the results to the /outgoing folder. View screen
>>> Tanium Support menu -> Database Operations -> Execute Query <<<
Running Query DBsizes
Query results saved to outgoing in DBsizes.results
Press enter to continue
- Enter Q to view query results. View screen
datname | size
-----------+---------
template1 | 7145 kB
template0 | 7145 kB
postgres | 7264 kB
tanium | 16 MB
(4 rows)
/tmp/tmp.G2h8V4Iab2 (END)
- Enter Q to return to the Manage Queries menu.
Display replication status
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter 3 to go to the Database Operations menu.
- Enter S to display the status.
Initiate database server failover
- Log into the TanOS console of the appliance with the secondary database as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter 3 to go to the Database Operations menu.
- Enter F to display the Database Server Failover menu.
- When prompted to enter maintenance mode, enter Yes.
- Follow the prompts to initiate the failover.
Reset the database cluster role
Use this procedure after the secondary database server has been promoted to primary.
- Log into the TanOS console as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter 3 to go to the Database Operations menu.
- Enter C to display the Reset Cluster Role menu.
- Follow the prompts to change the database cluster role.
Use the Performance Monitoring menu
You can use the Performance Monitoring menu to issue system activity report (SAR) commands or export SAR files that you can load into a SAR data viewer. SAR is part of the SysStat package.
Run a SAR command
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter P to go to the Performance Monitoring menu. View screen
------------------------------------------------------
>>> Tanium Support -> Performance Monitoring Menu <<<
1: Run SAR command
2: Export SAR Snapshot
3: Export SAR Performance data
4: Combine all SAR files
H: Help
R: Return to previous menu
------------------------------------------------------
- Enter 1 to display the SAR command menu. View screen
This menu options provides the ability to run selected SysStat (SAR) commands.
Results are view on terminal realtime and are not saved. If you need to save
the results, use the Snapshot command provided in the menu.
The sar command will be run with a predefined delay and iteration.
Commands are run with a 5 second interval and 12 iterations. This provides for
One minute of activity.
Available options
1 - CPU utilization 8 - Swap Space utilization
2 - Individual CPU usage 9 - Swap statistics
3 - Memory utilization 10 - Task/Switch activity
4 - Memory statistics 11 - I/O Xfer statistics
5 - Pageing statistics 12 - Block device Activity
6 - Hugepages statistics 13 - Network statistics
7 - Queue/Load 14 - Power Management
Please select an option or enter to quit:
- Use the menu to issue a command. The results of the command are returned to the screen. View screen
Linux 3.10.0-1062.12.1.el7.x86_64 (appliance-156.tam.local) 04/09/2020 _x86_64_ (2 CPU)
03:19:56 PM CPU %user %nice %system %iowait %steal %idle
03:19:57 PM all 0.50 0.00 0.50 0.00 0.00 99.00
03:19:58 PM all 0.00 0.00 0.50 0.00 0.00 99.50
03:20:00 PM all 0.50 0.00 0.50 0.00 0.00 99.00
03:20:01 PM all 0.50 0.00 0.50 0.00 0.00 99.00
03:20:02 PM all 2.50 0.00 4.00 0.00 0.00 93.50
Average: all 0.80 0.00 1.20 0.00 0.00 98.00
Available options
1 - CPU utilization 8 - Swap Space utilization
2 - Individual CPU usage 9 - Swap statistics
3 - Memory utilization 10 - Task/Switch activity
4 - Memory statistics 11 - I/O Xfer statistics
5 - Pageing statistics 12 - Block device Activity
6 - Hugepages statistics 13 - Network statistics
7 - Queue/Load 14 - Power Management
Please select an option or enter to quit:
Export a SAR snapshot
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter P to go to the Performance Monitoring menu.
- Enter 2 to take a five second snapshot of SAR data and export it to the /outgoing folder. View screen
>>> Collecting SAR performance snapshot <<<
Performance snapshot has been completed
Snapshot file is appliance-160_perfstats_040920_1522.txt
You may now download it from the sftp outgoing directory
Press enter to continue
-
Use SFTP to copy the snapshot file from the /outgoing directory on the appliance to your management computer.
Export a SAR performance data
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter P to go to the Performance Monitoring menu.
- Enter 3 to collect the complete set of SAR data files for the last 30 days and export it to a ZIP file in the /outgoing folder. View screen
>>> Creating zip file with SAR performance data <<<
Performance data was saved to file appliance-160_perfdata_040920_1526.zip.
You may now download it from the sftp outgoing directory
Press enter to continue
-
Use SFTP to copy the snapshot file from the /outgoing directory on the appliance to your management computer.
Export all SAR files
- Log into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
- From the tanadmin menu, enter 3 to go to the Tanium Support menu.
- Enter P to go to the Performance Monitoring menu.
- Enter 4 to collect all SAR files into a single file and export it to the /outgoing folder. View screen
>>> Collecting Complete SAR performance output <<<
Performance snapshot has been completed
Snapshot file is appliance-156_perfstats_040920_1534.txt
You may now download it from the sftp outgoing directory
Press enter to continue
-
Use SFTP to copy the snapshot file from the /outgoing directory on the appliance to your management computer.
