Example: Saved questions with associated actions

A saved question configuration can include an optional associated action, which is a recommendation from the question creator about the best package to deploy when acting on results. An associated action is just a default selection. The Tanium Server does not deploy it automatically, and users can select an alternative instead of the default selection. Add associated actions to create workflow associations, especially when another person might use the saved question you are creating as a tool to detect and remediate error states.

For details on the permissions required to manage associated actions, see Content management permissions.

Has Tanium Standard Utilities is a Tanium-provided saved question. It checks the Taniumâ„¢ Client installation directory for the existence of utilities that Tanium questions or actions rely on, and it returns Yes, No, or the names of missing files.

Figure  1:  Has Tanium Standard Utilities

When you click Deploy Action, the associated package is preselected. In this example, the package Distribute Tanium Standard Utilities is preselected.

Figure  2:  Associated package is preselected

When you configure the saved question, use the Associated Actions section to add a package.

Figure  3:  Adding a package to a saved question