Installing Health Check

Use the Tanium Solutions page to install Health Check and choose either automatic or manual configuration:

  • Automatic configuration with default settings (Tanium Core Platform 7.4.2 or later only): Health Check is installed with any required dependencies and other selected products. After installation, the Tanium Server automatically configures the recommended default settings. This option is the best practice for most deployments. For more information about the automatic configuration for Health Check, see Import and configure Health Check with default settings.
  • Manual configuration with custom settings: After installing Health Check, you must manually configure required settings. Select this option only if Health Check requires settings that differ from the recommended default settings. For more information, see Import and configure Health Check with custom settings.

Before you begin

Import and configure Health Check with default settings

When you import Health Check with automatic configuration, the following default settings are configured:

  • The Health Check service account is set to the account that you used to import the module.
  • A weekly collection schedule is enabled and configured.
  • For valid licenses, automatic data sharing is enabled.
  • Other settings, such as the log verbosity and Health Check tuning parameters, are configured.

To import Health Check and configure default settings, be sure to select the Apply Tanium recommended configurations check box while performing the steps in Tanium Console User Guide: Manage Tanium modules. After the import, verify that the correct version is installed: see Verify Health Check version.

Import and configure Health Check with custom settings

To import Health Check without automatically configuring default settings, be sure to clear the Apply Tanium recommended configurations check box while performing the steps in Tanium Console User Guide: Manage Tanium modules. After the import, verify that the correct version is installed: see Verify Health Check version.

Configure service account

The service account is a user that runs several background processes for Health Check. This user requires the Administrator reserved role.

For more information about Health Check permissions, see User role requirements.

  1. From the Main menu, go to Administration > Shared Services > Health Check to open the Health Check Home page.
  2. Click Settings and open the Service Account tab.
  3. Update the service account settings and click Save.

Set the collection schedule

You can set up automatic collection of TPAN reports. Run at least one report each week when most of your endpoints are online.

  1. From the Health Check Home page, in the Configure section, click the Collection Schedule step and click Configure Collection Schedule.

    If the Configure section is not visible in the Health Check Home page, click Manage Home Page, select Configure, and click Save.

  2. Select Enable, choose at least one day, and select a time.

    If you select Disable, you can manually run reports instead. For more information, see Run a TPAN report manually.

  3. Click Save.

Set the sharing preferences

If you have a valid license, you can choose to automatically share sanitized reports with Tanium. If you do not have an updated license or do not want to automatically share reports, you can download reports locally to share through other methods.

  1. From the Health Check Home page, in the Configure section, click the Sharing step and click Configure Sharing.

    If the Configure section is not visible in the Health Check Home page, click Manage Home Page, select Configure, and click Save.

  2. To disable automatic sharing of reports, select Do not automatically share and click Save.
  3. To enable automatic sharing of reports, select Automatically share with Tanium and click Save.

    You cannot select Automatically share with Tanium if you do not have a valid license. For more information about how to configure Health Check for sharing reports, contact your TAM.

Configure other settings

You can configure other settings such as the log verbosity and Health Check tuning parameters.

  1. From the Health Check Home page, in the Configure section, click the Other Settings step and click Configure Other Settings.

    If the Configure section is not visible in the Health Check Home page, click Manage Home Page, select Configure, and click Save.

  2. Configure the following settings:

    Set Log Level

    Level of logging detail for Tanium Health Check

    Number of reports to keep on disk

    Rolling number of TPAN reports that you want to keep on disk

    Info Page collection schedule

    How often the info page is gathered in the background

    Metrics collection schedule

    How often the metrics page is gathered in the background

    VDI in use

    Used for the server Tuning report

    Active-Active 50/50?

    Select Yes if you have a high availability (HA) deployment of Tanium servers

    Bandwidth Sensitive (Tanium Server 7.2)

    Used for the server Tuning report

    Bandwidth Limit (Tanium Server 7.3 or later)

    Used for the server Tuning report

  3. Click Save.

Upgrade Health Check

For the steps to upgrade Health Check, see Tanium Console User Guide: Manage Tanium modules. After the upgrade, verify that the correct version is installed: see Verify Health Check version.

Verify Health Check version

After you import or upgrade Health Check, verify that the correct version is installed:

  1. Refresh your browser.
  2. From the Main menu, go to Administration > Shared Services > Health Check to open the Health Check Home page.
  3. To display version information, click Info Info.

What to do next

See Getting started for more information about using Health Check.