Managing client settings using profiles

Use the Client Management service to create client profiles that apply client settings to different groups of clients.

Create profile configurations that specify client settings, and then create a client profile that defines how to apply those profile configurations to different groups of clients.

For information about additional client settings, see Tanium Client settings.

Create a profile configuration

Create a profile configuration to define a collection of client settings that you can apply to a group of clients by using it in a client profile.

  1. From the Client Management menu, click Profile Management > Profile Configurations, and click Create Configuration.

    To edit an existing profile configuration, click the name of the configuration, and click Edit. When you edit a profile configuration, you must manually redeploy any client profile that uses that configuration. For more information, see Create and deploy a client profile.

  2. Enter a Name for the profile configuration.
  3. Configure the following general client settings.

    Setting Name Description
    Logging Level

    The level of logging on an endpoint. The following values are best practices for specific use cases:

    • 0: Use this value to disable logging; use for clients installed on sensitive endpoints or virtual desktop infrastructure (VDI) endpoints.
    • 1: Use this value during normal operation.
    • 41: Use this value during troubleshooting.
    • 91 or higher: Use this value for full logging, for short periods of time only.
    Extensions Logging Level

    The level of logging for client extensions (such as the Tanium™ Client Recorder Extension and Tanium™ Index) on an endpoint. The following values are best practices for specific use cases:

    • 0: Use this value to disable logging; use for clients installed on sensitive endpoints or virtual desktop infrastructure (VDI) endpoints.
    • 11: Use this value during normal operation.
    • 41: Use this value during troubleshooting.
    • 91 or higher: Use this value for full logging, for short periods of time only.
    Cache Size The size limit, in MB, for the file cache on an endpoint. For more information, see Shard caching.
  4. If you are configuring a profile to apply to virtual desktop infrastructure (VDI) endpoints, select Enable VDI Settings, and configure the following VDI settings. Configuring these settings on individual endpoints overrides the values configured in Platform Settings (Administration > Configuration > Platform Settings) and can reduce resource use on VDI endpoints when you set the best practice values for VDI.

    Setting Name Description Best Practice Value for VDI
    Random Sensor Delay The interval, in seconds, within which execution of sensors is randomly delayed. This randomization reduces concurrent execution. 60
    Max Age Multiplier The value by which the maximum age for each sensor is multiplied. Setting a value higher than 1 reduces the frequency of sensor execution. For more information about maximum age, see Tanium Interact User Guide: Specify advanced sensor settings and Tanium Console User Guide: Create a sensor. 2
    Minimum Distribute Over Time The time, in seconds, over which to randomize distribution of actions. This randomization reduces concurrent execution. 60
    Save Client State Interval The interval at which strings from sensors are saved to disk. Increasing this value decreases disk usage. 1800
  5. Click Save.

Create and deploy a client profile

Create a client profile to define how to apply profile configurations to a group of endpoints.

  1. From the Client Management menu, click Profile Management > Client Profiles, and click Create Profile.

    To edit an existing client profile configuration, click the name of the profile, and click Edit Profile. When you edit a client profile, you must manually redeploy the profile.

  2. Enter a Name for the profile.
  3. Click Select Computer Groups, select the computer groups where you want the profile to apply, and click Save.
  4. In the Configurations section, select a settings configuration to apply to the endpoints in the selected computer groups.
  5. Click Save.
  6. To deploy the client profile to the selected computer groups, click Actions in the row for the profile, and select Deploy.

Prioritize client profiles

The order of the client profile list determines the priority of each client profile. If multiple client profiles target an endpoint, the profile with the highest priority takes precedence. You can reorder the list to adjust the priority of each profile.

  1. From the Client Management menu, click Profile Management > Client Profiles, and click Prioritize.
  2. Drag the profiles in the list to reorder them according to priority, and then click Prioritize.