Configuring Performance

If you did not install Performance with the Apply All Tanium recommended configurations, you must enable and configure certain features.

Install and configure Configure Tanium Endpoint Configuration

Manage solution configurations with Tanium Endpoint Configuration

Tanium Endpoint Configuration delivers configuration information and required tools for Tanium Solutions to endpoints. Endpoint Configuration consolidates the configuration actions that traditionally accompany additional Tanium functionality and eliminates the potential for timing errors that occur between when a solution configuration is made and the time that configuration reaches an endpoint. Managing configuration in this way greatly reduces the time to install, configure, and use Tanium functionality, and improves the flexibility to target specific configurations to groups of endpoints.

For solutions to Solutions cannot perform configuration changes or tool deployment through Endpoint Configuration on endpoints with action locks turned on, you must enable the Manifest Package Ignore Action Lock and Deploy Client Configuration and Support Package Ignore Action Lock settings. To access these settings, from the Endpoint Configuration Overview page, click Settings and select Global. on. As a best practice, do not turn on action locks. For more information about action locks, see Tanium Console User Guide: Managing action locks.

For more information about Endpoint Configuration, see Tanium Endpoint Configuration User Guide.

Configure Performance

(Optional) Configure the Performance action group

Importing the Performance module automatically creates an action group to target specific endpoints. If you did not use automatic configuration or you enabled restricted targeting when you imported Performance, the action group targets No Computers.

If you used automatic configuration and restricted targeting was disabled when you imported Performance, configuring the Performance action group is optional.

Select the computer groups to include in the Performance action group.

By default, Performance targets All Windows, All Linux, and All Mac.

Clear the selection for No Computers and make Make sure that all operating systems that are supported by Performance are included in the Performance action group.

Only endpoints that are members of the Performance action group can be targets of profiles because the necessary tools are distributed exclusively to endpoints in this action group. Metric collection begins when these tools and profiles are installed on an endpoint.

1. From the Main menu, go to Administration > Actions > Action Groups.
2. Click Tanium Performance.
3. Select the computer groups that you want to include in the action group and click Save.
   If you select multiple computer groups, choose an operator (AND or OR) to combine the groups.

Configure Profiles

Profiles define performance events for specified computer groups.

1. From the Performance menu, select Profiles.
2. Create and prioritize profiles. For more information, see Configuring profiles.

Set up Performance users

You can use the following set of predefined user roles to set up Performance users.

To review specific permissions for each role, see User role requirements.

On installation, Performance creates a Performance user to automatically manage the Performance service account. Do not edit or delete the Performance user.

For more information about assigning user roles, see Tanium Core Platform User Guide: Manage role assignments for a user.

Performance Administrator

Assign the Performance Administrator role to users who manage the configuration and deployment of Performance functionality to endpoints.
This role can perform the following tasks:

• Configure Performance service settings, including creating and editing profiles
• View Performance events
• Connect to an endpoint using Direct Connect and read data, kill processes, and download files from that endpoint
• Generate and view the Performance support bundle

Performance Operator

Assign the Performance Operator role to users who manage the configuration and deployment of Performance functionality to endpoints.
This role can perform the following tasks:

• Configure Performance service settings, including creating and editing profiles
• View Performance events
• Connect to an endpoint using Direct Connect and read data, kill processes, and download files from that endpoint

Performance User

Assign the Performance User role to users who analyze and remediate performance events on endpoints.
This role can perform the following tasks:

• View Performance profiles and events
• Connect to an endpoint using Direct Connect and read data, kill processes, and download files from that endpoint

Performance Read Only User

Assign the Performance Read Only User role to users who perform analysis of performance events on endpoints. This role has the same privileges as the Performance User role, except that users with this role cannot download files or kill processes on endpoints.
This role can perform the following tasks:

• View Performance profiles and events
• Connect to an endpoint using Direct Connect and read data from that endpoint

Performance Endpoint Configuration Approver

Assign the Performance Endpoint Configuration Approver role to a user who approves or rejects Performance configuration items in Tanium Endpoint Configuration.
This role can approve, reject, or dismiss changes that target endpoints where Performance is installed.

Do not assign the Performance Service Account role to users. This role is for internal purposes only.