Troubleshooting Performance

To collect and send information to Tanium for troubleshooting, collect log and other relevant information.

Collect logs

The information is saved as a compressed ZIP file that you can download with your browser.

  1. From the Performance home page, click Help , then the Troubleshooting tab.
  2. Collect the troubleshooting package. Click Generate Support Package. When the ZIP file is ready, click Download Support Package.
  3. Attach the ZIP file to your Tanium Support case form or send it to your TAM.

Check the action group

Performance requires two actions to report metrics from an endpoint:

First, an action must run to install the performance tools on the endpoint. This action should run about an hour after an endpoint is added to a computer group that is included in the Performance action group. The scheduled action is named Performance - Distribute Tools [Operating System].

Second, when a profile is saved, an action must run to drop the profile (if it is new) or update the profile (if it is modified) on the targeted endpoints. This action should run about an hour after the profile is created or modified. The name of this scheduled action is Performance - Profile Profile Name - [Operating System].

Complete these steps to verify the computer groups that are included in the Performance action group:

  1. From the Performance Home page, in the Configure Performance section, click the Add Computer Groups step and click Add Computer Groups.
  2. Select the Tanium Performance action group.
  3. Review the computer groups that are listed in the Computer Group Targets field.
  4. If needed, click Edit to make changes.
  5. If you made changes, click Save.

Uninstall Performance

If you need to uninstall Performance, first clean up the Performance artifacts on endpoints and then uninstall Performance from the server.

Remove Performance content and tools from endpoints

Each operating system has its own remove action. Therefore, you must select a group of endpoints for cleanup that has the same operating system.

  1. From the Main menu, click Interact.
  2. Ask a question to target the endpoints from which you want to remove Performance content and tools. For example, Get Performance - Tools Version from all machines.
  3. Select the row for the endpoints from which you want to remove the Performance profile (Windows Package Installed, Mac Package Installed, or Linux Package Installed).
  4. Click Deploy Action.
  5. On the Deploy Action page, enter Performance - Remove in the Enter package name here field.
  6. Select the Performance - Remove Profile operating system action, where operating system matches the operating system of the endpoints that you selected.
  7. Click Show preview to continue.
  8. A results grid displays at the bottom of the page showing you the targeted endpoints for your action. If you are satisfied with the results, click Deploy Action.
  9. Return to Interact. If your question results are still available, select the row for the endpoints from which you want to remove the Performance tools. If they are not, reissue the Get Performance - Tools Version from all machines question and then select the appropriate row.
  10. On the Deploy Action page, enter Performance - Remove in the Enter package name here field.
  11. Select the Performance - Remove Tools operating system action, where operating system matches the operating system of the endpoints that you selected.
  12. Click Show preview to continue.
  13. A results grid displays at the bottom of the page showing you the targeted endpoints for your action. If you are satisfied with the results, click Deploy Action.

Remove the Performance solution from the Tanium Module Server

  1. From the Main menu, click Tanium Solutions.
  2. In the Performance section, click Uninstall.
  3. Review the content that will be removed and click Uninstall.
  4. Depending on your configuration, enter your password or click Yes to start the uninstall process.
  5. Return to the Tanium Solutions page and verify that the Import button is available for Performance.

By design, the uninstall process does not remove Performance content (actions, packages, saved questions, and sensors) so that other solutions are not impacted if they use this content. If you are sure that this content is not being used by any other solutions, you can manually remove it.

Last updated: 10/16/2019 3:21 PM | Feedback