Example: Saved questions with associated actions
A saved question configuration can include an optional "associated action," which is a recommendation from the author about the best package to deploy when acting on results. An associated action is just a default selection. It is not deployed automatically, and an alternative can be selected in place of the default selection.
Add Associated Actions to create workflow associations, especially when another person might use the saved question you are creating as a tool to detect and remediate status.
Has Tanium Standard Utilities is a saved question included in the Initial Content pack. It checks the Tanium™ Client installation directory for the existence of utilities that Tanium questions or actions rely on, and it returns Yes, No, or the names of missing files.
When you click Deploy Action, the associated package is preselected. In this example, the package Distribute Tanium Standard Utilities is preselected.
When you configure the saved question, use the Associated Actions section to add a package.
Last updated: 2/14/2018 8:09 AM | Feedback