Tanium as a Service automatically handles module installations and upgrades.
Use the Tanium Solutions page to install Performance and choose either automatic or manual configuration:
- Automatic configuration with default settings (Tanium Core Platform 7.4.2 or later only): Performance is installed with any required dependencies and other selected products. After installation, the Tanium Server automatically configures the recommended default settings. This option is the best practice for most deployments. For details about the automatic configuration for Performance, see Import and configure Performance with default settings.
- Manual configuration with custom settings: After installing Performance, you must manually configure required settings. Select this option only if Performance requires settings that differ from the recommended default settings. For more information, see Import and configure Performance with custom settings.
Use the Automatic configuration with default settings option.
- Read the release notes.
- Review the Performance requirements.
- If you are upgrading from a previous version, see Upgrade Performance.
When you import Performance with automatic configuration, the following default settings are configured:
The following default settings are configured by default:
- The Performance service account is set to the account that you used to import the module.
- The Performance action group is set to the computer groups All Windows, All Linux, and All Mac.
- A profile is created with the default event rule configuration that targets All Computers.
- Performance tools and profiles are deployed to targeted endpoints.
To import Performance and configure default settings, be sure to select the Apply Tanium recommended configurations check box while performing the steps in Tanium Console User Guide: Manage Tanium modules. After the import, verify that the correct version is installed: see Verify Performance version.
To import Performance without automatically configuring default settings, be sure to clear the Apply Tanium recommended configurations check box while performing the steps in Tanium Console User Guide: Manage Tanium modules. After the import, verify that the correct version is installed: see Verify Performance version.
Configure the Performance service account
The service account is a user that runs several background processes for Performance. This user requires the following roles and access:
- Performance Components Manage permission, which the Performance Service Account role provides.
- Access granted to the computer groups that provide input to Performance reports. For more information about assigning computer groups to a user, see Tanium Core Platform User Guide: Assign computer groups to a user.
If you installed Tanium Client Management, this Thisuser requires the Endpoint Configuration Service Account role. Endpoint Configuration is installed as a part of Tanium Client Management.
- From the Main menu, click Modules > Performance to open the Performance Overview page.
- Click Settings .
- Update the service account settings and click Set Credentials.
For more information about Performance permissions, see User role requirements.
Configure the Performance action group
By default, the Computer Group Targets setting for the Performance action group is set to No Computers. Set the action group to All Computers or any computer group that you have defined.
Include only endpoints with operating systems that are supported by Performance in this action group.
Only endpoints that are members of the Performance action group can be targets of profiles because the necessary tools are distributed exclusively to endpoints in this action group. Metric collection begins when these tools and profiles are installed on an endpoint.
- From the Main menu, go to Administration > Actions > Scheduled Actions.
- In the list of action groups, click Tanium Performance.
- Click Edit, select computer groups to include in the action group, and click Save.
Tanium Endpoint Configuration delivers configuration information and required tools for Tanium Solutions to endpoints. Endpoint Configuration consolidates the configuration actions that traditionally accompany additional Tanium functionality and eliminates the potential for timing errors that occur between when a solution configuration is made and the time that configuration reaches an endpoint. Managing configuration in this way greatly reduces the time to install, configure, and use Tanium functionality, and improves the flexibility to target specific configurations to groups of endpoints.
Endpoint Configuration is installed as a part of Tanium Client Management. For more information, see the Tanium Client Management User Guide: Installing Client Management.
Additionally you can use Endpoint Configuration to manage configuration approval. For example, configuration changes are not deployed to endpoints until a user with approval permission approves the configuration changes in Endpoint Configuration. For more information about the roles and permissions that are required to approve configuration changes for Performance, see User role requirements.
To use Endpoint Configuration to manage approvals, you must enable configuration approvals.
- From the Main menu, go to Administration > Shared Services > Endpoint Configuration to open the Endpoint Configuration Overview page.
- Click Settings and click the Global tab.
- Select Enable configuration approvals, and click Save.
For more information about Endpoint Configuration, see Tanium Endpoint Configuration User Guide.
Profiles define performance events for specified computer groups.
- From the Performance menu, select Profiles.
- Create and prioritize profiles. For more information, see Configuring profiles.
If you want to connect directly to endpoints to see live and historical performance data, install and configure Direct Connect.
- From the Main menu, go to Administration > Configuration > Solutions.
- In the Content section, select Direct Connect, and click Import Selected.
- Enter your password and click OK.
- Configure Direct Connect. You must configure Direct Connect before you can connect to endpoints from Performance. For more information, see Direct Connect User Guide: Configure Direct Connect.
For more information about using Direct Connect with Performance, see Connecting directly to endpoints.
When you start the Performance workbench for the first time, the Tanium console ensures that all of the required dependencies for Performance are installed at the required version. You must install all required Tanium dependencies before the Performance workbench can load. A banner appears if one or more Tanium dependencies are not installed in the environment. The Tanium Console lists the required Tanium dependencies and the required versions.
- From the Main menu, go to Administration > Configuration > Solutions.
- Select the required solutions, click Import Selected, and then click Begin Import. When the import is complete, you are returned to the Tanium Solutions page.
- From the Main menu, go to Modules > Performance to open the Performance Overview page after you import all of the required Tanium dependencies.
Upgrade Performance to the latest version from the Tanium Solutions page.
In Performance 1.3.0 and later, you can configure Retention Settings to specify the Database maximum size and Database maximum days. Profiles created in Performance 1.2.1 and earlier do not include this setting. After you upgrade to Performance 1.3.0 or later, you can add this setting to a profile that you created in an earlier version by editing the profile, specifying the Retention Settings, and saving the profile.
After you import or upgrade Performance, verify that the correct version is installed:
- Refresh your browser.
- From the Main menu, go to Modules > Performance to open the Performance Overview page.
- To display version information, click Info .
Last updated: 12/2/2020 10:23 AM | Feedback