This guide describes how to use Tanium Interact™ (Interact). Interact is the user interface for asking Questions and reviewing results.
Interact is installed automatically during the Tanium Server installation. Although it is licensed as part of the core platform, Interact is a Tanium solution module, so it can be updated separately from the Tanium Console and the Tanium Server.
You use Interact to:
- Ask Dynamic Questions
A Question is a message sent to Tanium Clients requesting real-time data from its Sensors. Aggregate counts are reported in the results grid.
- Examine results and take action
From the results grid, you can drill down to target specific computers and use the Deploy Action workflow to schedule actions to be executed on the Tanium Client host computer.
- Use the Saved Questions collection and create new ones
A Saved Question is a configuration object that contains Question syntax and Question settings. In the Tanium Console, when you click a Saved Question, the Question is issued to Tanium Clients. Saving the Question syntax as a configuration object enables it to be reissued later. The configuration object can also be used throughout the platform, both by Tanium solution modules and by user-developed applications that use the SOAP API. For example, you can use Tanium Connect™ to configure a Saved Question to be run on a schedule with results sent to an external server.
- Review and manage Dashboards
A Dashboard is an organized group of Saved Questions. You can manage the set of Saved Questions contained in the group and apply Computer Group filters to the group.
- Review and manage Categories
A Category is an organized group of Dashboards. You can manage the set of Dashboards contained in the group and apply User Group permissions to view the Category object.
An essential set of Saved Questions, Dashboards, and Categories is created when the Initial Content packs are imported during the Tanium Server installation. Additional Saved Questions, Dashboards, and Categories are created when you import additional Tanium content packs and Tanium solution modules.
When you get started with Interact, review the Initial Content so that you are aware of the configuration objects that are already available to you. Reviewing the Initial Content can also help you become familiar with the kinds of Questions that can be asked, as well as ways of grouping them that can facilitate reporting and administration tasks. Once you understand how these configuration objects can be used, you will be better prepared to create your own when necessary.
Last updated: 6/29/2017 3:19 PM | Feedback