Installing Investigate

Tanium Cloud automatically handles module installations and upgrades.

For information about configuring Investigate for Tanium Cloud, see Configuring Investigate.

Use the Tanium Console Solutions page to install Investigate and choose either automatic or manual configuration:

  • Automatic configuration with default settings (Tanium Core Platform 7.4.2 or later only): Investigate is installed with any required dependencies and other selected products. After installation, the Tanium Server automatically configures the recommended default settings. This option is the best practice for most deployments. For more information about the automatic configuration for Investigate, see Import Investigate with default settings.
  • Manual configuration with custom settings: After installing Investigate, you must manually configure required settings. Select this option only if Investigate requires settings that differ from the recommended default settings. For more information, see Import Investigate with custom settings.

Before you begin

Import Investigate with default settings

(Tanium Core Platform 7.4.5 or later only) You can set the Investigate action group to target the No Computers filter group by enabling restricted targeting before adding Investigate to your Tanium licenseimporting Investigate. This option enables you to control tools deployment through scheduled actions that are created during the import and that target the Tanium Investigate action group. For example, you might want to test tools on a subset of endpoints before deploying the tools to all endpoints. In this case, you can manually deploy the tools to an action group that you configured to target only the subset. To configure an action group, see Tanium Console User Guide: Managing action groups. To enable or disable restricted targeting, see Tanium Console User Guide: Dependencies, default settings, and tools deployment.

When you import Investigations with automatic configuration, the following default settings are configured:

The following default settings are configured:

Setting Default value
Action group
  • Restricted targeting disabled (default): All Computers computer group
  • Restricted targeting enabled: No Computers computer group

To import Investigate and configure default settings, see Tanium Console User Guide: Import all modules and services. After the import, verify that the correct version is installed: see Verify Investigate version.

Import Investigate with custom settings

To import Investigate without automatically configuring default settings, be sure to clear the Apply All Tanium recommended configurations check box while performing the steps in Tanium Console User Guide: Import, re-import, or update specific solutions. After the import, verify that the correct version is installed: see Verify Investigate version.

Manage solution dependencies

Other Tanium solutions are required for Investigate to function (required dependencies) or for specific Investigate features to work (feature-specific dependencies). See Solution dependencies.

Upgrade Investigate

For the steps to upgrade Investigate, see Tanium Console User Guide: Import, re-import, or update specific solutions. After the upgrade, verify that the correct version is installed: see Verify Investigate version.

Verify Investigate version

After you import or upgrade Investigate, verify that the correct version is installed:

  1. Refresh your browser.
  2. From the Main menu, go to Modules > Investigate to open the Investigate Overview page.
  3. To display version information, click Info Info.