Tanium™ Asset 1.3 User Guide

PDF 1.3
PDF 1.2
  • All Files
Documentation Home > Tanium Asset User Guide

Installing Asset

You can install Asset from the Tanium Solutions page.

Before you begin

Import Asset

Import Asset from the Tanium Solutions page.

  1. From the Main Menu, click Tanium Solutions.

  2. Under Tanium Asset, click Import.

    Tanium Asset is a licensed solution. If Tanium Asset is not on the Tanium Solutions page, contact your Technical Account Manager.

  3. Initiate the import.
  4. After the installation process completes, refresh your browser.
  5. From the Main Menu, click Asset. The Asset home page is displayed.

Verify installation

To verify that Asset is installed, go to the Tanium Solutions page and check the installed version. To check the installed version on the Asset home page, click Info .

Configure Asset service account

If you are using Tanium Server 7.0, you can use a Content Administrator user for the service account.

If you are using Tanium Server 7.1 or later, you must use an Administrator user for the service account.

(Windows) Modify Asset service account

Update the Asset service to use a Windows administrator user. By default, the Asset service runs as Local System.

  1. In your Tanium Module Server machine, open the Services panel. Go to Control Panel > Administrative Tools > Services.
  2. Right click the Tanium Asset service, and select Properties.
  3. In the Log On tab, specify the user with Administrator credentials that you want to use to run the service.
  4. Stop and restart the service to complete the update.

Configure Asset service account and import process

Configure the service account and Asset import process in Asset. The service account runs background processes.

  1. From the Asset menu, go to Inventory Management > Sources.
  2. For the Tanium source, click Edit .
  3. Add the user name and password for the service account. You can also disable and change the log level settings for the Asset import process.
  4. Configure the asset data import schedule. The data import schedule determines how often asset data is imported from the Tanium live data into the asset database. This database provides data for offline assets. You can create a standard interval or a Cron schedule. For example, you might create one of the following intervals based on your environment size:
    • Less than 50,000 devices: every 1-2 hours
    • Less than 250,000 devices: every 4 hours
    • Greater than 500,00 devices: consult your TAM to configure the import schedule

    For more information about the Cron syntax, see Reference: Cron syntax.

Enable collection of Active Directory (AD) information

(Optional) To gather user data from Windows endpoints, including Full Name, Email, Phone, Department, and Location, enable the Asset Deploy Collect Active Directory Info scheduled action.

  1. From the Asset home page, click Settings .In the Advanced Settings tab, click Create Scheduled Actions.
  2. From the Main Menu, go to Actions > Scheduled Actions.
  3. Edit the Tanium Asset action group to include the computer group for which you want to collect this information. By default, the Computer Group Targets setting is set to No Computers. After you select a computer group, Asset further targets this group to include Windows systems only.
  4. The Asset Deploy Collect Active Directory Info action is listed in the action group. You can configure this action to run the collection routine every few hours.

The Asset Deploy Collect Active Directory Info action gets recent sign ins and the primary user of each system. A primary user has the most interactive sign ins the past 30 days. For Mac and Linux endpoints, you do not need to deploy any actions to get this information.

Configure query engine

Asset 1.3 introduces a new query engine that has improved stability and performance. To preview the v2 query engine, update the service settings. The v2 query engine an alternate implementation that uses a different SQL implementation from the v1 Query engine, so performance might vary depending on the size of your Asset database.

  1. From the Asset home page, click Settings .
  2. Choose Report Engine v2. Enable or disable report debug logging, depending on your preference. Debug logging records details about every report query that you generate, including query parameters.
  3. Click Save.

You can update the query engine setting to move back and forth between versions if you need to during testing.

What to do next

See Getting started for more information about using Asset.

Last updated: 6/12/2018 1:56 PM | Feedback