Monitoring performance scores

Use performance scores to monitor the health of the endpoints in your environment.

Before you begin

  • To view and configure performance scores, your Tanium license must include Tanium Engage.
  • For each endpoint, the performance score is calculated based on the active profile for the endpoint. To configure the performance score weight for a profile, see Create a profile.
  • For an overview of performance scores, see Performance scores.

View the Performance Score dashboard

The Performance Overview page contains a dashboard with performance score metrics in a visual format.

  1. From the Main menu, go to Performance > Overview.
  2. Navigate to the Performance Score section to view the Performance dashboard. The dashboard contains the following charts:
    ChartDescription
    Performance ScoreThe overall score of your environment
    Performance Score by Event TypeA breakdown of performance scores by event category.
    Total Endpoint Count by Performance ScoreThe number of endpoints with each performance score.
    Average Endpoint Performance Score by CriticalityThe average performance score by criticality level. Criticality values are assigned to endpoints in Tanium Criticality, and define the amount of risk the endpoint presents to the organization. For information about criticality levels, see Tanium Criticality User Guide: Criticality overview.
  3. When viewing the performance scores, the following options are available:
    • In the header of the section, select a Computer Group and Timeframe to apply to all charts in the section. Note that some charts might not contain data for all time frames and computer groups.
    • Chart data automatically refreshes every two minutes when the browser tab is open.
    • Click the name of a chart to open the report that supplies the data to the chart. For available options when viewing a report, see Tanium Reporting user guide: View reports.
    • Click any data point on a chart to view the data in a report.

You can also view individual endpoint scores in the Online Endpoints section on the Performance Overview page.

View performance scores by event

  1. From the Performance menu, select Events.
  2. Select any filters in the Targets section.
    1. Specify the computer group for which you want to see events in the Define Computer Groups field.
    2. Select a time period for the events from the Scope menu. The default option is Past Day.
    3. If you change any values, click Get Results to update the charts and table in the Events section.
  3. In the Events section, select an event category to show only events in the selected category.
    The report and charts that appear in the Events section contains a list of endpoints with matching events for the category.
  4. (Optional) In the report, expand Filters and then select a model, platform, and process name to add additional filters to the report. To remove report filters, click Clear Filters.
  5. (Optional) To connect to an endpoint, find the endpoint in the report, and then click Direct Connect to Endpoint in the Action column.

View performance scores by endpoint

  1. From the Main menu, go to Performance > Performance Score.
  2. Navigate to the Endpoint Performance Scores section. This section shows a table of endpoints that are tracked by Performance, including a column for Performance Score.

    If the Performance Score column does not appear, click Customize Columns and select the Performance Score column to show the column in the table.

  3. Use the search, filter, and sort controls to quickly find an endpoint in the table.
    • Rows must match all filters to appear in the table.
    • Enter a value in the Filter items field to show rows with matching text in any column.
    • To add advanced filters, expand Filters and then add individual or groups of filters. You can then add filters in rows and groups.
        • To add an individual filter, click + Row, select a source, operator, and value that endpoints must match, and then click Apply.
        • To add related filters, click + Grouping. For each filter, select a source, operator, and value that endpoints must match, and then click Apply. Select this option to nest a Boolean operator and then add rows or more groups to build the nested expression.
    • To filter the report by a particular cell, hover over the cell, click Options Options, and click Filter by value Filter
    • To copy the contents of a single cell, hover over the cell, click Options Options, and click Copy Cell Value Copy.
    • To view basic details for an endpoint, click Endpoint Details next to the name of an endpoint in the Computer Name column. From the basic details, you can then click View Details to view and manage the endpoint in Tanium Reporting. For information, see Tanium Reporting user guide: View and manage a single endpoint.
    • Click Export to CSV to download a copy of the table as a CSV file. The CSV file includes the table headers and table data.
    • Click Refresh to show updated data.

    4. You can also view individual endpoint scores in the Online Endpoints section on the Performance Overview page.