Succeeding with Performance

Follow these best practices to achieve maximum value and success with Tanium Performance. These steps align with the key benchmark metrics: increasing Performance coverage across endpoints and reducing the number of endpoints with critical performance events.

Step 1: Gain organizational effectiveness

Complete the key organizational governance steps to maximize Performance value. For more information about each task, see Gaining organizational effectiveness.

Develop a dedicated change management process.

Define distinct roles and responsibilities in a RACI chart.

Validate cross-functional organizational alignment.

Track operational metrics.

Step 2: Install Tanium modules

Install Tanium Direct Connect. See Tanium Direct Connect User Guide: Installing Direct Connect.

Install Tanium Client Management, which provides Tanium Endpoint Configuration. See the Tanium Client Management User Guide: Installing Client Management.

Install Tanium Performance. See Installing Performance.

Install Tanium Trends. See Tanium Trends User Guide: Installing Trends.

Import the IT Operations Metrics board from the Trends initial gallery. See Tanium Trends User Guide: Importing the initial gallery.

If you install Trends using the Tanium Recommended Installation workflow, the IT Operations Metrics board is automatically imported.

Step 3: Step 2: Configure Performance

Configure Direct Connect. See Tanium Direct Connect User Guide: Import and configure Direct Connect with custom settings.

If you install Direct Connect using the Tanium Recommended Installation workflow, Direct Connect is automatically configured. Verify that the Fully Qualified Domain Name setting in the Endpoint Connection settings was set correctly to a domain name that resolves to the Module Server from all endpoints.

Set the action groups for Performance and Direct Connect. See Installing Performance and the Configure the Direct Connect action group section in Tanium Direct Connect User Guide: Import and configure Direct Connect with custom settings.

If you install Performance and Direct Connect using the Tanium Recommended Installation workflow, the Performance action group is set to these computer groups: All Windows, All Linux, and All Mac and the Direct Connect action group is set to All Computers.

(Optional) Modify the action groups for Performance and Direct Connect. See (Optional) Configure the Performance action group and Tanium Direct Connect User Guide: Configuring Direct Connect.

By default, the Performance action group is set to these computer groups: All Windows, All Linux, and All Mac and the Direct Connect action group is set to All Computers.

Step 4: Step 3: Configure a profile

(Optional) Create a profile. See Managing profiles.

In the profile, configure event rules and retention settings, choose thresholds and durations for event reporting, and target the profile at a computer group.

If you install Performance using the Tanium Recommended Installation workflow, a profile is created A profile is created automatically with the default event rule configuration and retention settings that targets All Computers.

Step 5: Step 4: Investigate performance problems in your environment

Review the Events page and look for common patterns across your environment. See Analyzing events.

Step 6: Step 5: Connect to endpoints and troubleshoot issues

Look for endpoints with the most severe performance issues, or issues that require in-depth investigation.

For example, you might want to investigate an endpoint that is reporting a high number of system crashes, an application that is crashing often, or a computer model that is associated with a high number of disk capacity events. Connect to the endpoints using Direct Connect to troubleshoot and investigate the issues using live and historical data from the endpoint. See Connecting directly to endpoints.

Use Direct Connect to troubleshoot issues on endpoints and gather data to respond to help desk tickets.

Step 7: Step 6: Monitor Performance metrics

From the Trends menu, click Boards and then click IT Operations Metrics to view the Performance Coverage and Endpoints with Critical Performance Events panels.

Monitor and troubleshoot Performance Coverage.

Monitor and troubleshoot Endpoints with Critical Performance Events.