Example: Saved questions with associated actions
A saved question configuration can include an optional associated action, which is a recommendation from the question creator about the best package to deploy when acting on results. An associated action is just a default selection. The Tanium Server does not deploy it automatically, and users can select an alternative instead of the default selection. Add associated actions to create workflow associations, especially when another person might use the saved question you are creating as a tool to detect and remediate error states.
For details on the permissions required to manage associated actions, see Content management permissions.
Has Tanium Standard Utilities is a Tanium-provided saved question. It checks the Tanium™ Client installation directory for the existence of utilities that Tanium questions or actions rely on, and it returns Yes, No, or the names of missing files.
When you click Deploy Action, the associated package is preselected. In this example, the package Distribute Tanium Standard Utilities is preselected.
When you configure the saved question, use the Associated Actions section to add a package.
Last updated: 2/11/2021 3:37 PM | Feedback