Reference: Tanium Status and Support menus

TanOS includes the following diagnostic menus.

  Menu Usage
Status System Status View OS or network status.
Tanium Status View the status of Tanium processes.
Appliance Status View appliance version information, OS status, or hardware status.
Tanium Support Tanium Log Files Review logs. See Review Tanium Core Platform logs and Review Tanium solution module logs.
Database Operations Run diagnostics or queries. See Use Database Operations menus.
Run Network Diagnostics Use ping, port tests, nslookup, and IPsec check utilities.
Run Health Check Check the status of network services and Tanium services. See Run the Health Check.
Display Last Scheduled Health Check Results A health check is run automatically every 15 minutes. Use this option to view previous results.
Appliance Hardware Report Check hardware status.
Run TSG Run the Tanium™ Support Gatherer (TSG) scripts. The output is written to a file you can share with Tanium Support. See Run Tanium Support Gatherer.
Run Tcpdump Run tcpdump for the selected network interface. Host/IP and port filters are supported.
Performance Monitoring Use SAR commands and snapshots. See Use the Performance Monitoring menu.
Advanced Support Copy Core Files Copy any core dump files to the /outgoing folder so they can be copied by the tancopy user.
Generate Process Memory Dump Generate a process dump from a running Tanium process and copy it to the /outgoing folder.
Directory Space Usage View disk usage per directory.

 

Use the Status menus

System Status shows OS and network status. Tanium Status shows Tanium™ component status. Appliance Status shows appliance version information, OS status, or hardware status.

tanadmin: View system status

  1. Sign into the TanOS console as a user with the tanadmin role.
  2. Enter 4 to go to the Status menu. ClosedView screen
  3. Enter 1 to go to the System Status menu. ClosedView screen
  4. Enter 1 to view OS status, or enter 2 to view network status.

tanuser: View system status

  1. Sign into the TanOS console as a user with the tanuser role.
  2. Enter 1 to go to the System Status menu. ClosedView screen
  3. Enter 1 to view OS status, or enter 2 to view network status.

tanadmin: View Tanium status

  1. Sign into the TanOS console as a user with the tanadmin role.
  2. Enter 4 to go to the Status menu. ClosedView screen
  3. Enter 2 to go to the Tanium Status menu. ClosedView screen

tanuser: View Tanium status

  1. Sign into the TanOS console as a user with the tanuser role.
  2. Enter 2 to go to the Tanium Status menu. ClosedView screen
  3. Use the menu to view Tanium service status.

tanadmin: View appliance status

  1. Sign into the TanOS console as a user with the tanadmin role.
  2. Enter 4 to go to the Status menu. ClosedView screen
  3. Enter 3 to go to the Appliance Status menu. ClosedView screen
  4. Use the menu to view appliance version information, OS status, or hardware status.

tanuser: View appliance status

  1. Sign into the TanOS console as a user with the tanuser role.
  2. Enter 3 to go to the Appliance Status menu.
  3. Use the menu to view appliance version information, OS status, or hardware status.

Use the Tanium Support menu

  1. Sign into the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu. ClosedView screen

Use the Advanced Support menu

  1. Sign into the TanOS console as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu. ClosedView screen
  3. Enter X to go to the Advanced Support menu. ClosedView screen
  4. Use the menu to copy core files, generate a process dump for a Tanium process, or view directory space usage.

Use Database Operations menus

If you encounter issues with the Tanium deployment, Tanium Support might direct you to perform database operations.

View the Postgres log file

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu. ClosedView screen
  3. Enter 3 to go to the Database Operations menu. ClosedView screen
  4. Enter 1 to go to the Select File menu. ClosedView screen
  5. Enter the line number for the postgres.log file, and use the menu to view the log or copy it to the /outgoing folder. ClosedView screen

View Postgres configuration files

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter 2 to go to the Select File menu. ClosedView screen
  5. Use the menu to review or modify the configuration.

View Postgres control data

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter 3 to view Postgres control data. ClosedView screen

Enable full Postgres audit log

Postgres logs are very rarely useful in troubleshooting appliance or platform issues. Audit logging is disabled by default. When enabled, Postgres logging can consume inordinate disk space. For best results, enable audit logging only when debugging.

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter 4 and follow the prompts to enable audit logging. ClosedView screen

Manage the database memory plan

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter D to go to the DB Tuning menu. ClosedView screen
  5. Use the menus to view or make changes to the database memory plan.

Run the Postgres top command

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter M to view results of the top command. ClosedView screen
  5. Enter Q to return to the Database Operations menu.

Query the tanium database

The Manage Queries menu includes predefined queries that can be useful during troubleshooting.

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter Q to go to the Manage Queries menu. ClosedView screen
  5. Enter S to go to the Select Query menu. ClosedView screen
  6. Use the menu to select a predefined query and return to the Manage Queries menu.
  7. Enter X to run the query and save the results to the /outgoing folder. ClosedView screen
  8. Enter Q to view query results. ClosedView screen
  9. Enter Q to return to the Manage Queries menu.

View replication status

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter S to view the status.

Initiate database server failover

  1. Sign into the TanOS console of the appliance with the secondary database as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter 3 to go to the Database Operations menu.
  4. Enter F to go to the Database Server Failover menu.
  5. When prompted to enter maintenance mode, enter Yes.
  6. Follow the prompts to initiate the failover.

Use the Performance Monitoring menu

You can use the Performance Monitoring menu to issue system activity report (SAR) commands or export SAR files that you can load into a SAR data viewer. SAR is part of the sysstat package.

Run a SAR command

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu. ClosedView screen
  4. Enter 1 to go to the SAR command menu. ClosedView screen
  5. Use the menu to issue a command. The results of the command are returned to the screen. ClosedView screen

Export a SAR snapshot

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu.
  4. Enter 2 to take a five second snapshot of SAR data and export it to the /outgoing folder. ClosedView screen
  5. Use SFTP to copy the snapshot file from the /outgoing directory on the appliance to your management computer.

Export a SAR performance data

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu.
  4. Enter 3 to collect the complete set of SAR data files for the last 30 days and export it to a ZIP file in the /outgoing folder. ClosedView screen
  5. Use SFTP to copy the snapshot file from the /outgoing directory on the appliance to your management computer.

Export all SAR files

  1. Sign into the TanOS console of the appliance with the primary database server as a user with the tanadmin role.
  2. Enter 3 to go to the Tanium Support menu.
  3. Enter P to go to the Performance Monitoring menu.
  4. Enter 4 to collect all SAR files into a single file and export it to the /outgoing folder. ClosedView screen
  5. Use SFTP to copy the snapshot file from the /outgoing directory on the appliance to your management computer.