Monitoring software inventory and usage

You can track and monitor software inventory and usage on endpoints. For example, you might track usage of a product to confirm that your enterprise is using the number of purchased licenses for the product and reclaim unused licenses.

The process for monitoring software inventory usage involves both collecting and reporting data.

  1. After the Tanium Client is installed on a Microsoft Windows or macOS endpoint, Asset starts collecting software inventory and usage on the endpoint. Usage is collected each minute.

  2. Reports on software inventory and usage generate after the following conditions are met:

    • You track products to enable reporting in the Asset Software Inventory & Usage > All Products page.

    • The Tanium Client and tracked product are installed for at least seven days or the specified baseline period.

    Asset reports the vendor, product, version, number of endpoints with installed product, and usage of the installed product on the endpoints, including last used date and usage levels.

If you want to view software usage for products that are not tracked and reported in Asset, use the SIU - Installed Products, SIU - Product First Used, SIU - Product Last Used, and SIU - Product Used sensors. For assistance, see Contact Tanium Support.

Track a product to enable reporting

You must track a product to enable reporting in Asset. You can only track a product or suite listed on the Software Inventory & Usage > All Products page. For example, if Microsoft Office 365 is listed on the page, Asset tracks usage for the suite and not for individual products within the suite.

Because product usage information is stored on the endpoint, only track products with an associated cost or similar concern. Tracking all products might create Asset performance issues. If you want to view software usage for products that are not tracked and reported in Asset, use the SIU - Installed Products, SIU - Product First Used, SIU - Product Last Used, and SIU - Product Used sensors.

  1. From the Asset menu, click Software Inventory & Usage > All Products.
  2. Click Start Tracking next to the appropriate product.
  3. To edit the usage parameters, in the Action column, click Edit Parameters .

    1. Configure the reporting and baseline periods.
    2. Specify the total number of minutes per day for high and normal usage levels. The minutes do not need to be consecutive. The default high value is 240. The default normal value is 60.

    3. Click Save.

  4. To stop tracking usage for a product, click Stop Tracking .

View software inventory and usage

You can view software inventory and usage details from the Software Inventory & Usage and Reports menus. To drill down for specific endpoint details, use the reports available in the Reports menu.

View product inventory and general usage

  1. From the Asset menu, click Software Inventory & Usage.
  2. Click All Products or All Vendors to review the data.

    All Products only displays data for tracked products.

  3. To export the data to a CSV file, click Export . The export includes the data as it is currently displayed in the data grid.

View last used date of a product

The last used date is the date the endpoint last reported usage for the product. For endpoints shared with multiple users, this is the last date that any user on the endpoint used the product.

  1. From the Asset menu, click Reports > SIU Product Last Used.

  2. View the Last Used Date for the product.

View usage levels of a product

  1. From the Asset menu, click Reports > SIU Product Usage.

  2. View the Usage for the product.

The report includes the average daily usage level for a product.

Level Description
High Number of minutes defined in Software Inventory & Usage > All Products > Edit Parameters .
Normal Number of minutes defined in Software Inventory & Usage > All Products > Edit Parameters .
Limited Number of minutes between one and the Normal usage level.
Baselining Product is newly installed and not reporting usage in Asset. The baseline length is defined in Software Inventory & Usage > All Products > Edit Parameters .
Usage not detected Tanium Client does not detect usage of the product. For example, the baseline period has passed and the product has not been used.
Not installed Endpoint does not have the software installed or is unable to install the software.

View installed version of product

  1. From the Asset menu, click Reports > SIU Installed Products.

  2. View the Version for the product.

Manage products based on product usage

Based on SIU usage reports, you can install or remove products on targeted endpoints.

Remove unused products from endpoints

Use Deploy to remove unused products from endpoints. The following example removes Microsoft Internet Explorer on endpoints that have not used it in the last 90 days. Adjust the example as needed.

  1. Create a software package to remove the product. For more information, see Tanium Deploy User Guide: Create a software package.

  2. Create a deployment package that uses the software package. For more information, see Tanium Deploy User Guide: Create a software package deployment.

    Part of creating a deployment package is targeting endpoints. Target endpoints that have not used Internet Explorer in the last 90 days.

    1. In Endpoints to target, click Question Criteria > Filter Builder > Row.
    2. Select the SIU - Product Usage sensor.
    3. Select contains, and enter Usage not detected.
    4. In the Vendor and Product fields, enter Microsoft and Internet Explorer.
    5. In Days Back, enter 90. This is the maximum number of days to evaluate.
    6. In Baseline Period Days, enter 90. This is the minimum number of days that Internet Explorer needs to be on the endpoint.
    7. Click Apply.

Install required products on endpoints

Use Deploy to install a product missing on endpoints. The following example installs Quest Software TOAD for Oracle on Windows endpoints that have not had it installed. Adjust the example as needed.

  1. Create a software package to install the product. For more information, see Tanium Deploy User Guide: Create a software package.

  2. Create a deployment package that uses the software package. For more information, see Tanium Deploy User Guide: Create a software package deployment.

    Part of creating a deployment package is targeting endpoints. Target Windows endpoints that have not had TOAD for Oracle installed.

    1. In Endpoints to target, click Question Criteria > Filter Builder > Row.
    2. Select the SIU - Product Usage sensor.
    3. Select contains, and enter not installed.
    4. In the Vendor and Product fields, enter Quest Software and TOAD for Oracle.
    5. In Days Back, enter 90. This is the maximum number of days to evaluate.
    6. In Baseline Period Days, enter 0. This is the minimum number of days that TOAD for Oracle needs to be on the endpoint.
    7. Click Apply.
    8. Click Row.
    9. Select the Operating System sensor.
    10. Select contains, and enter Windows.
    11. Click Apply.