Succeeding with Performance
Follow these best practices to achieve maximum value and success with Tanium Performance. These steps align with the key benchmark metrics: increasing Performance coverage across endpoints and reducing the number of endpoints with critical performance events.
Develop a dedicated Change management process.
Define distinct roles and responsibilities in a RACI chart.
Validate cross-functional Organizational alignment.
Track Operational metrics.
Install Tanium Direct Connect. See Tanium Direct Connect User Guide: Installing Direct Connect.
Install Tanium Performance. See Installing Performance.
Install Tanium Trends. See Tanium Trends User Guide: Installing Trends.
Import the Performance board from the Trends initial gallery. See Tanium Trends User Guide: Importing the initial gallery. If you installed Trends using the Apply Tanium recommended configurations option, the Performance board is automatically imported after the Performance service account is configured.
Configure the Performance service account. See Installing Performance.
If you install Performance using the Apply Tanium recommended configurations option, the service account is automatically set to the account that you used to install Performance.
Configure Direct Connect. See Tanium Direct Connect User Guide: Import and configure Direct Connect with custom settings.
If you install Direct Connect using the Apply Tanium recommended configurations option, Direct Connect is automatically configured. Verify that the Fully Qualified Domain Name setting in the Endpoint Connection settings was set correctly to a domain name that resolves to the Module Server from all endpoints.
Set the action groups for Performance and Direct Connect. See Installing Performance and Tanium Direct Connect User Guide: Configure the Direct Connect action group.
If you install Performance and Direct Connect using the Apply Tanium recommended configurations option, the Performance action group is set to these computer groups: All Windows, All Linux, and All Mac and the Direct Connect action group is set to All Computers.
Create a profile. See Configuring profiles.
In the profile, configure event rules and retention settings, choose thresholds and durations for event reporting, and target the profile at a computer group.
Review the Events page and look for common patterns across your environment. See Analyzing events.
Look for endpoints with the most severe performance issues, or issues that require in-depth investigation.
For example, you might want to investigate an endpoint that is reporting a high number of system crashes, an application that is crashing often, or a computer model that is associated with a high number of disk capacity events. Connect to the endpoints using Direct Connect to troubleshoot and investigate the issues using live and historical data from the endpoint. See Connecting directly to endpoints.
Use Direct Connect to troubleshoot issues on endpoints and gather data to respond to help desk tickets.
From the Trends menu, click Boards and then click Performance to view the Performance Coverage and Endpoints with Critical Performance Events panels.
Last updated: 9/16/2020 12:43 PM | Feedback