Customizing the Console and Interact

You can customize the appearance and behavior of the Tanium Console and Interact Overview page.

Select the Console color

In deployments with multiple environments (such as lab environments, test environments, and production environments), customizing the top border color of the Tanium Console Main menu (header) can help users identify which environment they are signed into for the current session. The following figure shows an example of a custom color.

Figure  1:  Tanium Console Main menu color

Users require the Administrator reserved role to manage the console color.

In an active-active deployment, the Tanium Console instances for both Tanium Servers use the same color configuration. You cannot specify a different color for each server.

  1. From the Main menu, go to Administration > Configuration > Miscellaneous > Console Configurations.
  2. In the Console Color section, use the Current Color selector to pick your custom color or click No Color .
  3. Click Save Change, wait about two minutes for the change to apply, and then refresh your web browser to confirm that the new color appears as expected.

Configure Console header text

By default, the Tanium Console Main menu (header) displays no text above the version fields. In deployments with multiple environments (such as lab environments, test environments, and production environments), adding text can help users identify which environment they are signed into for the current console session. The following figure shows an example that identifies a Production Environment:

Figure  2:  Tanium Console header text

Users require the Administrator reserved role to manage the Main menu text.

In an active-active deployment, the Tanium Console instances for both Tanium Servers use the same text configuration. You cannot specify different text for each server.

Perform the following steps to add, edit, or remove the Main menu text:

  1. From the Main menu, go to Administration > Configuration > Miscellaneous > Console Configurations.
  2. In the Console Header Text section, enter the new text in the Change Header Text field.

    If you want to revert to the default (no text), click Reset.

  3. Click Save Change, wait about two minutes for the change to apply, and then refresh your web browser to confirm that the text appears as expected.

Select the task confirmation prompt

Many tasks that users initiate in the Tanium Console require responding to a confirmation prompt before the tasks proceed. Select the prompt type based on whether you want to optimize Tanium Console security (password prompt) or the user experience (yes/cancel prompt).

Only users assigned the Administrator reserved role can manage the confirmation prompt.

If you enable Security Assertion Markup Language (SAML) single sign-on, the Tanium Server automatically changes the prompt to a Yes/Cancel prompt. For details, see Integrating with LDAP servers.

  1. From the Main menu, go to Administration > Configuration > Miscellaneous > Confirmation Prompt.
  2. Select Show a password prompt or Show a Yes/Cancel prompt, and then click Save.

Customize the Console help URL

By default, clicking the Help link in the Main menu opens a new browser tab or window with the URL https://docs.tanium.com. In deployments where that URL is inaccessible (for example, if the Tanium Server does not have Internet access), you can change the help URL.

Figure  3:  Tanium Console Help link

Users require the Administrator reserved role to manage the console help URL.

  1. From the Main menu, go to Administration > Configuration > Miscellaneous > Console Configurations.
  2. In the Help URL section, enter the new URL in the Change URL field.

    If you want to revert to the original, default help URL, click Reset.

  3. Click Save Change, wait about two minutes for the change to apply, and refresh your web browser.
  4. Click the Help link to verify that it opens the new URL.

Customize the Console logo

You can replace the default Tanium logo in the Main menu (header) and login page of the Tanium Console with the logo of your organization. The Tanium Console supports all the standard image formats that your browser supports, such as PNG, JPG, and SVG. The maximum file size is 2 MB. You can also adjust the logo height, which is 24 pixels by default. The Tanium Console automatically scales the logo width proportionately.

Figure  4:  Logo in Main menu and login page

Users require the Administrator reserved role to manage the console logo.

  1. Create your own logo file if you want to replace the Tanium logo.
  2. From the Main menu, go to Administration > Configuration > Miscellaneous > Console Configurations.
  3. (New logo only) In the Console Logo section, click Choose File, select the logo file, and click Open.

    If you want to revert to the original, default logo, click Reset.

  4. (Optional): In the Adjust logo size field, specify the logo height in pixels.
  5. Click Save Change, wait about two minutes for the change to apply, and then refresh your web browser to confirm the updated logo appears as expected.

Set Console user preferences

User preferences control certain behaviors of the Tanium Console on a per-user basis. Changes that you make to your settings affect all the personas that are assigned to your account, but do not affect other users. The Tanium Server applies the preferences of a user when that user signs into the console. The Tanium Console filters the settings on the Edit Preferences page based on the effective permissions of the user (persona) who accesses the page.

  1. Click the drop down beside <username> at the top right of the Tanium Console and select Preferences.
  2. Configure the following settings and click Save. The changes apply immediately.
 Table 1: User preferences
Settings Guidelines
Consider question results complete at Tanium Console pages that display results from Tanium Clients (such as the Question Results and Action Status pages) indicate that all clients have responded when the number of registered clients that responded reaches the specified threshold (default is 99%). TaaSThe Tanium Server calculates the number of registered clients based on when it initiated the operation, such as when it issued a question or deployed an action. However, the actual number of registered clients might fluctuate during the period between the initiation and timeout of the operation. For example, several end users might close their laptops soon after a question is issued and before it times out (default 10 minutes). For cases where the calculated and actual numbers of registered clients might never match, setting the value at less than 100% prevents console users from waiting indefinitely for an indication that all clients have answered.

A user role with Saved Question read permission or Ask Dynamic Questions permission is required to see and configure this setting.

Suspend console automatically if no activity detected for By default, the Tanium Console automatically ends a user session and displays the sign-in page if the user performs no activity on the console for 10 minutes. The value must be equal to or less than the timeout that your administrator set for all users through the max_console_idle_seconds setting (Administration > Global Settings). The global setting has a default of 3,600 seconds (1 hour). If you set the user preference to a lower value than the global setting, the Tanium Server applies the user preference.

Note that initiating a solution import or update operation suspends the inactivity timer. The timer resets to zero and resumes at the moment the operation finishes.

By default, the Tanium Console displays a warning 60 seconds before the activity timeout to give users a chance to preserve their current session. To display the warning sooner or later, set the console_idle_warning_seconds setting (Administration > Global Settings).

Submit filter text after After the user starts typing in a filter field in the Tanium Console, the Tanium Server does not start searching for the text string until the specified time period passes. The default is 700 ms.
Hide error results from questions Enabled by default. Select this option if you want the Questions Results grid to omit null or error values, such as [no results] or [results currently unavailable]. This option provides clarity in that the grid shows only the answers that are likely to be useful. However, this option also prevents the grid from showing the complete set of answers received from all endpoints.

A user role with Saved Question read permission or Ask Dynamic Questions permission is required to see and configure this setting.

Language Select a language for text that appears in the Tanium Console. The default is the language that is selected for the browser that you use to access the console.
Trusted Auth Origins (Salesforce deployment only) This field specifies the domains in your Salesforce Information Technology Service Management (ITSM) instance from which users can authenticate to access the Tanium Console. If the domain names change, enter the new names as a comma-separated list.
Restricted Targeting Tanium solutions (modules and shared services) that employ tools on managed endpoints create their own action groups and automatically deploy the tools to those groups. By default, the action groups target the All Computers filter group but you can set the No Computers filter group as the target by selecting Restricted Targeting. This option enables you to control tools deployment by preventing automatic deployment. For example, you might want to test Tanium™ Comply tools on a subset of endpoints before deploying the tools to all endpoints. In this case, you can manually deploy the tools to an action group that you configured to target only the subset: see Managing action groups.
Because TaaS imports and configures solutions automatically, you must configure restricted targeting before adding solutions to your license if you want the updated setting to apply to those solutions.

Customize module overview pages

Each Tanium module has an Overview page that appears when you navigate to the module. Overview pages are organized into sections such as guidance on getting started, reports related to module health, or reports related to deployment metrics. If you show, hide, or reorder sections of a module Overview page, your changes apply across all the personas that are assigned to your user account. The following steps also apply to customizing the Tanium Home page Tanium Home page.

  1. View the content on a module Overview page. From the Main menu, select Modules > <module name>.
    • By default, all the page sections are expanded so that their contents are visible. You can toggle between collapsing Collapse and expanding Expand a page section.

      Collapse section

    • Click Hide within any section that you do not want the page to show.


      The following steps describe how to reverse this change if necessary.

  2. To customize the Overview page, click Customize page Customize Page.
    1. Select the sections that you want to display.

    2. Click and drag the sections to change the order in which they appear, and then click Save.

The Tanium Home page and Interact Overview page display categories, dashboards, and saved questions that you selected as favorites. To change the favorites, see Filter by favorites.