Installing Performance

Tanium as a Service automatically handles module installations and upgrades.

For information about configuring Performance for Tanium as a Service (TaaS), see Configuring Performance.

Use the Tanium Console Solutions page to install Performance and choose either automatic or manual configuration:

  • Automatic configuration with default settings (Tanium Core Platform 7.4.2 or later only): Performance is installed with any required dependencies and other selected products. After installation, the Tanium Server automatically configures the recommended default settings. This option is the best practice for most deployments. For details about the automatic configuration for Performance, see Import Performance with default settings.
  • Manual configuration with custom settings: After installing Performance, you must manually configure required settings. Select this option only if Performance requires settings that differ from the recommended default settings. For more information, see Import Performance with custom settings.

Use the Automatic configuration with default settings option.

Before you begin

  • Read the release notes.
  • Review the Performance requirements.
  • If you are upgrading from a previous version, see Upgrade Performance.
  • Assign the correct roles to users for Performance. Review the User role requirements.
    • To import the Performance solution, you must be assigned the Administrator reserved role or a role that has the Import Signed Content permission.
    • To configure the Performance action group, you must be assigned the Administrator reserved role, Content Administrator reserved role, or a role that has the Write Action Group permission.

Import Performance with default settings

(Tanium Core Platform 7.4.5 or later only) You can set the module action group to target the No Computers filter group by enabling restricted targeting before adding the module to your Tanium licenseimporting the module. This option enables you to control tools deployment through scheduled actions that are created during the import and that target the module action group. For example, you might want to test tools on a subset of endpoints before deploying the tools to all endpoints. In this case, you can manually deploy the tools to an action group that you configured to target only the subset. To configure an action group, see Tanium Console User Guide: Managing action groups. To enable or disable restricted targeting, see Tanium Console User Guide: Dependencies, default settings, and tools deployment.

When you import Performance with automatic configuration, the following default settings are configured:

The following default settings are configured:

Setting Default value
Action group
  • Restricted targeting disabled (default): All Windows, All Linux, and All Mac computer groups.
  • Restricted targeting enabled: No Computers computer group.
Service account The service account is set to the account that you used to import the module.

Configuring a unique service account for each Tanium solution is an extra security measure to consider in consultation with the security team of your organization. See Configure service account.

Profiles A profile is created with the default event rule configuration that targets All Computers.

To import Performance and configure default settings, see Tanium Console User Guide: Import all modules and services. After the import, verify that the correct version is installed: see Verify Performance version.

Import Performance with custom settings

To import Performance without automatically configuring default settings, be sure to clear the Apply All Tanium recommended configurations check box while performing the steps in Tanium Console User Guide: Import, re-import, or update specific solutions. After the import, verify that the correct version is installed: see Verify Performance version.

To configure the service account, see Configure service account.

To configure the Performance action group, see Add computer groups to the Performance action group.

To configure a profile, see Configure Profiles.

(Optional) To install and configure Direct Connect, see (Optional) Install and configure Direct Connect.

Manage dependencies for Tanium solutions

When you start the Performance workbench for the first time, the Tanium Console ensures that all of the required dependencies for Performance are installed at the required version. You must install all required Tanium dependencies before the Performance workbench can load. A banner appears if one or more Tanium dependencies are not installed in the environment. The Tanium Console lists the required Tanium dependencies and the required versions.

  1. Install the modules and shared services that the Tanium Console lists as dependencies, as described under Tanium Console User Guide: Import, re-import, or update specific solutions.
  2. From the Main menu, go to Modules > Performance to open the Performance Overview page.

Upgrade Performance

For the steps to upgrade Performance, see Tanium Console User Guide: Import, re-import, or update specific solutions. After the upgrade, verify that the correct version is installed: see Verify Performance version.

In Performance 1.3.0 and later, you can configure Retention Settings to specify the Database maximum size and Database maximum days. Profiles created in Performance 1.2.1 and earlier do not include this setting. After you upgrade to Performance 1.3.0 or later, you can add this setting to a profile that you created in an earlier version by editing the profile, specifying the Retention Settings, and saving the profile.

Verify Performance version

After you import or upgrade Performance, verify that the correct version is installed:

  1. Refresh your browser.
  2. From the Main menu, go to Modules > Performance to open the Performance Overview page.
  3. To display version information, click Info Info.