Configuring attributes

You can configure the attributes that get populated as asset data. These attributes can come from Tanium or a configured source. These attributes become the columns that you can include in your reports.

Asset solution content

When you install Asset, solution content is installed. Some of this solution content is similar to the content packs that got imported when you installed Tanium. In most cases, the Asset version of the content adds attributes or improves the information beyond the existing sensor. For example, the Asset CPU sensor includes columns for speed, cores, and processors, but the CPU sensor from the Initial Content - Hardware content pack contains one column. The Asset custom content is hidden on the Content > Sensors page.

View and edit default asset attributes

By default, Asset imports about 70 common attributes from Tanium sensors. To view the list of default attributes, go to the Asset menu and click Inventory Management > Attributes.

  • To sort a column, click the column header.
  • To filter the list on any field, use the search.
  • To customize the columns that are displayed and column order, click Customize Columns.
  • To copy a CSV version of the data listed in the table to the clipboard, click Copy .
  • To edit an individual attribute, click Edit .

Normalized attributes

The Installed Applications table contains fields for Normalized Name and Normalized Vendor. Normalized values resolve variants on a vendor or software name. For example, the following vendor values: CompanyName, Inc. , CompanyName Inc, and CompanyName LLC, are resolved to CompanyName for the Normalized Vendor column.

Normalization occurs after data load. If values are in the Name or Vendor columns, a normalized value is also calculated.

Configure additional Tanium attributes

You can import attributes from Tanium sensor data. For example, you might choose to import other critical configuration information from other Tanium products, solutions, or custom content.

Important considerations for attributes

  • Use non-parameterized sensors as attributes. You cannot use a parameterized sensor as an Asset attribute.
  • Remember that each attribute you add increases the number of saved questions that are asked during the data import process. Each new attribute also adds columns and data to the Asset database.
  • Avoid adding attributes that change often, especially attributes that return a large amount of data.
  • Consider how frequently Asset inventories your environment. If the attribute data becomes stale before the next schedule import, it might not be a good attribute to add.
  • Gather data that you need more frequently than the scheduled import process with Interact or a saved question.

Add attributes

  1. From the Asset menu, click Inventory Management > Attributes. Click Create Attribute.
  2. Search for and select the sensors from which you want to add attributes. Remember that parameterized sensors are not available to use as attributes. To view all of the Asset custom content, you can search for Asset in this sensor list. Select the attributes that you want to import.
  3. (Optional) To change the data type, display name, or storage method for a selected attribute, click Settings for the associated attribute.
  4. Click Create and verify that the changes are correct.

    This step makes changes to the Asset database. Review and verify carefully.

  5. After the database updates are completed, you can see the new attribute in the main list of attributes in Pending state. The new attribute stays in pending state until the next time the Tanium source import job runs, and data gets populated in the database. To run this job immediately, see View schedule and run import. When populated, the attribute displays in Ready state. You can add attributes that are in Ready state to custom reports.

Configure external attributes

You can also import attributes from an external data source.

Before you begin

If you are importing data into Tanium from an external data source, configure the import first. Configuring the source defines which database tables to import and how to correlate the data with the ci_item table in the Asset database. See Configuring sources.

Add external attributes

  1. From the Asset menu, click Inventory Management > Attributes. Click Create Attribute.
  2. In the Source column, find the data source that you configured. You can search for and select the field that you want to add as an attribute.
  3. Asset automatically converts values in the database based on the following type mapping: 
    SQL data typeAsset data type
    BIGINTBIGINT
    DATEDATEONLY
    DATETIME, TIMESTAMP WITH TIME ZONEDATE
    BIT, BOOLEAN, TINYINTBOOLEAN
    STRING, CHARACTER VARYING (255), VARCHAR (255)STRING
    FLOAT, DOUBLE PRECISIONFLOAT
    INT, INTEGER, SMALLINTINTEGER
    CHAR, NCHAR, NVARCHAR, TEXT, VARCHARTEXT
  4. Click Create and verify that the changes are correct.

    This step makes changes to the Asset database. Review and verify carefully.

  5. After the database updates are completed, you can see the new attribute in the main list of attributes in Pending state. The new attribute stays in pending state until the next time the External database job runs, and data gets populated in the database. To run this job immediately, see View schedule and run import. When populated, the attribute displays in Ready state. You can add attributes that are in Ready state to custom reports.

Schedule and run Asset data imports

The import asset data schedule determines how often Asset pulls data from Tanium or an external data source to save in the Asset database. This database is used to provide information for offline assets.

View schedule and run import

  1. From the Asset menu, click Inventory Management > Schedules. On the Import Schedules tab, the schedule is displayed.
  2. Hover over the schedule and click Run Now to override the schedule and have Asset immediately pull source data into the Asset database.
  3. If you have any attributes that are in Pending state, you can watch the attributes change to Ready state on the Inventory Management > Attributes page. You can add attributes that are in Ready state to custom reports.

If you want to change the import schedule, update the asset source. See Configuring sources.

View imports

On the Asset Home page, you can view a timeline of the recent imports and exports. The timeline contains each import, with one of the following statuses: 

  • : Scheduled
  • : Running
  • : Successful
  • : Error

Set user permissions on attributes

In addition to the Asset user roles that control access to Asset reports and settings as a whole, you can define more detailed permissions on individual Asset attributes. For example, you can create permissions that assign a user group permission to access information about Windows or Mac platform assets only. If a user belongs to multiple user groups, the permissions for all the user groups are combined with an OR operator.

Before you begin, you must have a user group to which you want to assign the Asset permissions. See Tanium Core Platform User Guide: Managing user groups. For the users in this user group to access Asset, they also must have an Asset user role assigned. See User role requirements.

  1. From the Asset Home page, click Settings . Click the Permissions tab.
  2. Click Create Permissions.
  3. Select the user group from the list that you want to assign.
  4. Add a Condition. This list of attributes is from the ci_item table of the Asset database.
    For example, to assign the user group permission to view Windows assets only, set to OS Platform contains Windows.
  5. Click Save to create each condition.
  6. Click Create.

Delete attributes

To delete an attribute, you must disable the attribute, then remove references.

  1. Disable the attribute.
    1. From the Asset menu, click Inventory Management > Attributes.
    2. Click Edit next to the attribute that you want to disable.
    3. Clear the Enabled setting. Click Save.
  2. Remove references to the attribute from all reports, views, permissions, and Service Now destinations.
    1. Click Delete next to the attribute that you want to remove.
    2. A list of known locations where the attribute is used is displayed. Click the link for each item, and edit the item to remove the use of the attribute.
    3. Click Refresh to list the remaining references.
  3. After you remove the references, type the name of the attribute to confirm its deletion. Click Delete Attribute.

The attribute is deleted from the Asset database on the next load of data from the data source.

Last updated: 10/15/2019 2:15 PM | Feedback