Installing Health Check

Use the Tanium Solutions page to install Health Check and choose either automatic or manual configuration:

  • Automatic configuration with default settings (Tanium Core Platform 7.4.2 or later only): Health Check is installed with any required dependencies and other selected products. After installation, the Tanium Server automatically configures the recommended default settings. This option is the best practice for most deployments. For more information about the automatic configuration for Health Check, see Import and configure Health Check with default settings.
  • Manual configuration with custom settings: After installing Health Check, you must manually configure required settings. Select this option only if Health Check requires settings that differ from the recommended default settings. For more information, see Import and configure Health Check with custom settings.

Before you begin

Import and configure Health Check with default settings

When you import Health Check with automatic configuration, the following default settings are configured:

  • The Health Check service account is set to the account that you used to import the module.
  • A weekly collection schedule is enabled and configured.
  • For valid licenses, automatic data sharing is enabled.
  • Other settings, such as the log verbosity and Health Check tuning parameters, are configured.

To import Health Check and configure default settings, be sure to select the Apply Tanium recommended configurations check box while performing the steps in Tanium Console User Guide: Manage Tanium modules. After the import, verify that the correct version is installed: see Verify Health Check version.

Import and configure Health Check with custom settings

To import Health Check without automatically configuring default settings, be sure to clear the Apply Tanium recommended configurations check box while performing the steps in Tanium Console User Guide: Manage Tanium modules. After the import, verify that the correct version is installed: see Verify Health Check version.

Configure service account

The service account is a user that runs several background processes for Health Check. This user requires the Administrator reserved role.

For more information about Health Check permissions, see User role requirements.

  1. From the Main menu, go to Administration > Shared Services > Health Check to open the Health Check Overview page.
  2. Click Settings and then click Service Account if needed.
  3. Update the service account settings and click Save.

If you are running Tanium Servers on Windows, ensure that you change the account that is used to run the Tanium Health Check service from LOCAL SYSTEM to an account that has access to the Tanium Servers and Zone Servers. Otherwise, the generated reports do not contain server information about the Tanium Servers and Zone Servers.

Set the collection schedule

You can set up automatic collection of TPAN reports. Run at least one report each week when most of your endpoints are online.

  1. On the Health Check Overview page, click Settings and then click Collection Schedule if needed.
  2. Select Enabled, choose at least one day, and select a time.

    If you select Disabled, you can manually run reports instead. For more information, see Run a TPAN report manually.

  3. Click Save.

Set the sharing preferences

If you have a valid license, you can choose to automatically share sanitized reports with Tanium. If you do not have an updated license or do not want to automatically share reports, you can download reports locally to share through other methods.

  1. On the Health Check Overview page, click Settings and then click Sharing if needed.
  2. To disable automatic sharing of reports, select Do not automatically share and click Save.
  3. To enable automatic sharing of reports, select Automatically share with Tanium and click Save.

    You cannot select Automatically share with Tanium if you do not have a valid license. For more information about how to configure Health Check for sharing reports, Contact Tanium Support.

Configure other settings

You can configure other settings such as the log verbosity and Health Check tuning parameters.

  1. On the Health Check Overview page, click Settings and then click Other Settings if needed.
  2. Configure the following settings:

    Log Level

    Level of logging detail for Tanium Health Check

    Number of reports to keep on disk

    Rolling number of TPAN reports that you want to keep on disk

    Info Page collection schedule

    How often the info page is gathered in the background

    Metrics collection schedule

    How often the metrics page is gathered in the background

    VDI in use

    Used for the server Tuning report

    Active-Active 50/50?

    Select Yes if you have a high availability (HA) deployment of Tanium servers

    Bandwidth Sensitive (Tanium Server 7.2)

    Used for the server Tuning report

    Bandwidth Limit (Tanium Server 7.3 or later)

    Used for the server Tuning report

  3. Click Save.

Manage dependencies for Tanium solutions

When you start the Health Check workbench for the first time, the Tanium console ensures that all of the required dependencies for Health Check are installed at the required version. You must install all required Tanium dependencies before the Health Check workbench can load. A banner appears if one or more Tanium dependencies are not installed in the environment. The Tanium Console lists the required Tanium dependencies and the required versions.

  1. From the Main menu, go to Administration > Configuration > Solutions.
  2. Select the required solutions, click Import Selected, and then click Begin Import. When the import is complete, you are returned to the Tanium Solutions page.
  3. From the Main menu, go to Modules > Health Check to open the Health Check Overview page after you import all of the required Tanium dependencies.

Upgrade Health Check

For the steps to upgrade Health Check, see Tanium Console User Guide: Manage Tanium modules. After the upgrade, verify that the correct version is installed: see Verify Health Check version.

Verify Health Check version

After you import or upgrade Health Check, verify that the correct version is installed:

  1. Refresh your browser.
  2. From the Main menu, go to Administration > Shared Services > Health Check to open the Health Check Overview page.
  3. To display version information, click Info Info.