Working with dashboards

In Reporting, a dashboard organizes a collection of panels. A panel can contain a chart, text, and action deployment options. Chart panels are based on report data. A dashboard can have one or more collapsible sections to organize related panels. For an overview of dashboards, including Tanium-managed and emerging issue dashboards, see Dashboards.

View dashboards

Perform the following steps to open a dashboard. You can access only dashboards that are in content sets for which you have Reporting Dashboard read permission.

1. From the Main menu, go to Data > Dashboards.

   The Dashboards page lists all the dashboards that you have permissions to access.

   The page shows basic settings for each dashboard, such as the Dashboard Name and Content Set. If a dashboard has a description, labels, and associated reports, click Expand beside the Dashboard Name to see these additional settings. To see the additional settings for all dashboards, click Expand in the column heading. Associated reports are reports that serve as a chart source for a dashboard (see Chart data sources). For details on other basic settings, see Dashboard settings.

2. (Optional) Use the following search and filter options to facilitate finding specific dashboards if the grid is long. The grid shows only the dashboards that match all the filters and search text that you specify.

   Dashboard search and filter options

   Option	Description
   Filter by labels	Select Labels to show only the dashboards to which those labels are assigned. You can also use the Labels panel to add, edit, or delete labels. See Managing labels.
   Filter by favorites	Use the Show buttons to toggle between showing All dashboards or only dashboards that are in your favorites list . Click beside a dashboard name to add the dashboard to your favorites list or click to remove the dashboard from your favorites list.
   Filter by content set	Select a content set to show only the dashboards that are assigned to that set.
   Filter by author	Select a user name to show only the dashboards that the user created or select one of the Tanium Managed options to show only the predefined dashboards that Tanium provides (see Tanium-managed dashboards).
   Filter by creation date	Specify a range of dashboard creation dates by clicking the Created on and to calendar widgets .
   Search by text	Enter an alphanumeric string to filter by dashboard name or description.

3. (Optional) Select a View as option to determine how the page displays the dashboards:

   Dashboard views

   View option	Description
   List view (default)	List the dashboards only by text attributes, such as name, author, and content set assignment.
   Grid view	Display the dashboards as a grid, with a row for each dashboard. Each row shows small previews of the dashboard charts. In grid view, the charts render faster if you use the search and filter controls to reduce the number of dashboards before clicking . Click in a chart to add that chart to your favorites list or click to remove the chart from your favorites list. Click Next to see charts that do not fit in your browser view. By default, the grid is sorted by Dashboard Name but you can select another attribute (such as Content Set assignment) in the dropdown. You can change the computer group filter for: All dashboards: Select a group in the Computer Group dropdown. A specific dashboard chart: In the chart, click Computer Group and select a group. Only computer management groups appear as filter options for dashboards. For information about the types of computer groups, see Tanium Console User Guide: Managing computer groups. The computer group that you select applies only to the current instance of the Dashboards page. To change computer group filters permanently, edit the dashboard. See Edit dashboards.

4. Click a Dashboard Name to open the dashboard. You can then perform the following dashboard management tasks.

   If dashboard panels include endpoint data that is no longer relevant, you can purge the data that Tanium Data Service currently stores for those endpoints. See Purge endpoint data.

   Dashboard management tasks

   Task	Description
   View or edit basic dashboard settings	Click beside the dashboard name to show the dashboard description, content set assignment, label assignments, author (creator), creation date/time, date/time of the last update, user who performed the last update, and the reports that the dashboard uses. Each report name is a link that opens the report. Each label name is a link that opens the Dashboards page with the label selected as a filter in the Labels section. Perform the following steps to edit the dashboard name, description, content set assignment, or label assignments. For Tanium Managed dashboards, the only allowed edits are assigning a different content set and adding labels. Click Edit beside the dashboard name. Update the settings and click Save.
   Set favorite status	Click beside a dashboard name to add the dashboard to your favorites list or click to remove the dashboard from your favorites list.
   Filter by Computer Group	The following options are available to filter charts by computer group: Select a Computer Group in the dropdown if you want all the charts to show data from only that group. Your selection overrides the default computer group that is configured in each chart (see Default Group). Reporting saves your selection without opening the dashboard in edit mode and requiring you to manually save. To override the computer group for a single chart, click Computer Group within the chart and select a group. You cannot save the override selection; the next time you open the dashboard, it shows data for the default computer group. Only computer management groups appear as filter options for dashboards. For information about the types of computer groups, see Tanium Console User Guide: Managing computer groups. Some charts might not contain data for certain computer groups. See Data is missing from certain endpoints.
   Filter by Timeframe	Select a Timeframe if you want all the charts to show data only from a specific date or date range. Your selection overrides the timeframe that is configured in each chart (see Date/Timeframe). Reporting saves your selection without opening the dashboard in edit mode and requiring you to manually save. Based on the chart type, you can open a tooltip that indicates the date/time when Reporting ran a collection for the data: Historical charts: In area charts and line charts, hover over a data point. One-day charts: In other chart types, hover over the chart name. For details on the Timeframe options, see Date options. For details on how Reporting collects data for a timeframe, see Historical data collection. Some charts might not contain data for certain time frames. See Data is unavailable for timeframe.
   Export as JSON or HTML	To export the dashboard as an HTML or JSON file to the downloads folder of your local browser, click Export and select Dashboard as HTML or Dashboard Definition as JSON. For details, see Export dashboards. To export dashboards in HTML format to a destination other than the downloads folder of your local browser, see Export dashboards through Tanium Connect. To import dashboard configurations from a JSON file into another Tanium Cloud instanceTanium Server, see Import dashboards.
   Refresh data	By default, a dashboard updates every two minutes when the browser tab is open. In the dashboard header, click Refresh to manually refresh all charts on the dashboard. To change the automatic refresh interval, click and either select an interval or select Pause auto refresh to stop automatic refreshes.
   Edit dashboard contents	Click Edit and perform the steps under Edit dashboards to change which sections, charts, and data the dashboard includes.
   Clone dashboard	Click Clone and perform the steps under Clone dashboards.
   Open associated reports	If you set the View as option to Grid View , you can click the name of a chart panel to open the report that provides the chart data. The report opens in a new browser tab. Clicking a data point in the chart opens the report with that data point applied as a filter. When you click a data point from a past date/time in a historical chart, the report that opens shows the current data, not the past data.
   Deploy actions	(Action panels only) If an action panel indicates an issue on endpoints that requires attention and provides a Deploy Action option, you can address the issue by deploying an action to the endpoints. If only one action is available, the panel provides a Deploy Action button. If multiple actions are available, the panel provides a Deploy Action dropdown. Clicking the button or selecting a dropdown option opens the Action Deployment page, where you can configure and schedule the action. See Tanium Console User Guide: Deploying actions. Action panels are a feature of emerging issue dashboards that Tanium manages (see Emerging issue dashboards) but custom dashboards can also have action panels (see Add action panels).
   Delete dashboard	Click Delete and perform the steps under Delete dashboards.

Create dashboards

You have two options for creating dashboards:

• Create new dashboards
• Clone dashboards: This is a quicker workflow if an existing dashboard has settings, sections, and panels that are similar to what you want for the new dashboard.

Tanium-managed dashboards might provide the information that you want without the need to create a custom dashboard. See Tanium-managed dashboards.

Create new dashboards

1. From the Main menu, go to Data > Dashboards.

2. Click Create Dashboard and configure the following settings:

   Dashboard settings

   Setting	Decription
   Dashboard Name	Enter a name of up to 255 characters to identify the dashboard.
   Content Set	Assign the dashboard to a Content Set. The dropdown lists only the content sets for which you have Dashboard write permission. Only users who have Dashboard read permission for the content set can access the dashboard.
   Description (optional)	Enter a description for other users to understand the purpose and contents of the dashboard.
   Labels (optional)	Assign one or more labels to use when filtering the Dashboards page by labels. If the list of labels is long, use the search field within the dropdown to quickly find labels. The search field shows each selected label as a pill with an X. Click X within a pill to unassign that label or click the X to the right of all the pills to unassign all labels. To simultaneously create and assign a label, type its name in the Labels search field and select Create <name> in the dropdown. For information on labels, see Managing labels.

3. Click Create. Reporting saves the dashboard and opens it in edit mode.
4. (Optional) Select the Computer Group and Timeframe filters. For details, see Filter by Computer Group and Filter by Timeframe.
5. Perform the following tasks to add sections and panels to the dashboard, and then click Save:
   • Add sections
   • Add chart panels
   • Add action panels
   • Add text panels

Clone dashboards

1. From the Main menu, go to Data > Dashboards.

2. Click the Dashboard Name of the dashboard with settings and contents that are similar to dashboard you want to create.
3. Click Clone, edit the settings (see Dashboard settings), and click Save. Reporting saves the dashboard and opens it in edit mode.
4. (Optional) Select the Computer Group and Timeframe filters. For details, see Filter by Computer Group and Filter by Timeframe.
5. Edit the sections and panels as necessary (see Edit dashboards), and then click Save.

Edit dashboards

Limitations when editing dashboard attributes

You can edit the sections, panels, filters, and basic settings of a custom dashboard.

The only allowed edits for Tanium-managed dashboards are assigning a different content set and adding labels. However, you can clone a Tanium Managed dashboard and edit all the settings of the clone. See Clone dashboards.

If you remove Tanium-assigned labels from a Tanium-managed dashboard, those labels are restored the next time you update or re-import Reporting. However, you can remove labels that another user assigned to a Tanium-managed dashboard.

For details on Tanium-managed dashboards, see Tanium-managed dashboards.

Edit a dashboard

1. From the Main menu, go to Data > Dashboards and click the Dashboard Name of the dashboard that you want to edit.
2. To edit the dashboard name, description, content set assignment, or label assignments, click Edit beside the name, update the settings, and click Save. For details on these settings, see Dashboard settings.
3. To edit the Computer Group and Timeframe filters, see Filter by Computer Group and Filter by Timeframe.
4. To edit dashboard sections and panels, click Edit, and perform the corresponding tasks.
   The dashboard editor contains a grid layout to assist when you resize and move panels within the grid.

   If you resize or move panels in a section, the section might automatically resize vertically to match the largest height of panels.

   Dashboard editing tasks

   Option	Description
   Add sections	Add sections to the dashboard. See Add sections.
   Edit section names	Type over the existing name for a section to rename it. Section names can have up to 255 characters.
   Move sections	Select Reorder Sections, and then click and drag sections in the desired order.
   Delete sections	Click Delete beside the section name to delete the section and any panels in it.
   Add panels	Add one or more panels to each section: Add chart panels Add action panels Add text panels
   Edit panels	Click Edit at the top of the panel and configure the settings just as you do when adding a panel.
   Move panels	Click the blank space in a panel, and then drag the panel to the desired location. When you release the mouse button, the panel snaps to the nearest coordinates on the design grid.
   Resize panels	Click and drag any panel corner or panel edge midpoint. When you release the mouse button, the panel snaps to the nearest coordinates on the design grid. The panel size determine how much data the panel shows. To show more data, enlarge the panel.
   Delete panels	Click Delete at the top of the panel.

5. Click Save when you finish editing the dashboard.

Any changes that you make to the dashboard are not saved until you click Save.

Add sections

In dashboards, a section is a collapsible division that groups related panels. A dashboard can have multiple sections, and each section can contain multiple panels. A dashboard requires at least one section. If you add a panel to a dashboard without a section, Reporting automatically creates a section for the panel.

1. Perform one of the following steps to add a section to an existing or new dashboard:

   • Existing dashboard: From the Main menu, go to Data > Dashboards, click the Dashboard Name, and click Edit.

   • New dashboard: Clone an existing dashboard or create one from scratch. The new dashboard automatically opens in edit mode. For details, see Create dashboards.
2. Select Add > Add Section.

   Reporting adds the section to the bottom of the dashboard.

   To move the section, select Reorder Sections, and then click and drag sections into the desired order.

3. Scroll to the bottom of the dashboard to find the new section.
4. (Optional) Enter a name of up to 255 characters for the section.
5. Add one or more panels to the section:

• Add chart panels

• Add action panels

• Add text panels

6. Click Save when you finish editing the dashboard.

Add action panels

An action panel contains a message that alerts users to issues that require attention. Optionally, you can configure the panel to identify the number of affected endpoints and to provide corrective actions that users can deploy to those endpoints. In the following example, the action panel indicates how many endpoints have the PrintNightmare vulnerability and provides options for mitigating the vulnerability and for rolling back the mitigation action.

Before you add action options to a panel, the packages that the actions deploy must exist. If no Tanium-defined packages exist for the issues that the panel addresses, see Tanium Console User Guide: Create a package.

1. Perform one of the following steps to add a panel to an existing or new dashboard:

   • Existing dashboard: From the Main menu, go to Data > Dashboards, click the Dashboard Name, and click Edit.

   • New dashboard: Clone an existing dashboard or create one from scratch. The new dashboard automatically opens in edit mode. For details, see Create dashboards.

2. Perform one of the following steps depending on the dashboard section where you want to add the panel:

   • Bottom section: At the top of the dashboard, select Add > Add Action Panel.
   • Any other section: In the section where you want the panel, select Add Panel > Add Action Panel.
3. Configure the following settings and then click Done:

   Action panel settings

   Tab	Settings
   Type	Category: Select Recommended Action if you want the panel to provide the option to deploy actions. Topic: Select Emerging Issues if the panel addresses an emerging issue. Priority: Select a priority level to help users understand the importance and urgency of the issue that the panel addresses.
   Message	Enter the text for users to read in the panel. For example, if the message concerns a vulnerability, you can enter highlights of the latest industry information and Tanium insights on the vulnerability. If you want the message to include the count of affected endpoints, repeat the following steps for each issue for which you want to add a count: Move your cursor to the spot in the message where you want the count to appear. Select the report that provides the count and click Add.
   Actions	(Optional) You can add one or more actions to deploy packages that remediate or mitigate issues on endpoints, or to roll back previous remediations or mitigations. Repeat the following steps for each action:  Click Add Action. Enter an Action Label to appear in the Deploy Action dropdown of the panel. The label applies only if the panel provides multiple actions. If only one action is available, the panel displays a button labeled Deploy Action regardless of the label you configure. Select the Package Name.

4. Click Save when you finish editing the dashboard.

Export dashboards

You can export dashboards in the following file formats to the downloads folder of your local browser:

• JSON: Export dashboard configurations as a JSON file to import into another Tanium Cloud instanceTanium Server. See Import dashboards.
• HTML: Export the dashboard as a standalone HTML file that you can distribute to stakeholders or post to an internal web server.

To export reports in HTML format to a destination other than the downloads folder of your local browser, see Export dashboards through Tanium Connect.

1. From the Main menu, go to Data > Dashboards.
2. Perform one of the following steps based on the preferred export format:

   • JSON: Select the dashboards and select Export > Dashboard Definition as JSON (single dashboard) or click Export Dashboard Definitions (multiple dashboards).

     The Export > Dashboard Definition as JSON option is available within a dashboard also if you open the dashboard.

   • HTML: Click the Dashboard Name to open the dashboard and select Export > Dashboard as HTML.

The exported file has the name dashboard_definition_export_<month_day_year>.json or <dashboard-name>_<month_day_year>.html.

Export dashboards through Tanium Connect

Use Connect to send dashboards to Connect destinations.

Before you begin

• Your Tanium license must include Connect.
• You must install Connect 5.9.65 or later and Reporting 1.12 or later.
• You must have access to Connect with the Connect Operator or Connect Administrator role.
• You must have a role with the Dashboard read and Report API user permissions. Predefined roles with required permissions include Reporting Operator and Reporting User.
• Reporting must have one or more dashboards.

Create a connection

The following steps describe the basic settings that you configure for a connection. Additional settings vary by connection destination. For details, see Tanium Connect User Guide: Managing connections.

1. From the Main menu, go to Modules > Connect.
2. From the Connect Overview page, scroll to the Connections section and click Create Connection.
3. In the General Information section, enter a Name and optional Description for the connection.
4. In the Configuration section, select Tanium Reporting (Reports and Dashboards) for the Source.
5. Select an Export Format, and then select Dashboard as the Type.
6. Select the Dashboard to export, and then select the Computer Group for which to show data.
   If dashboards have duplicate names, you can distinguish them by the author and dashboard ID that are appended to the dashboard names. The ID for a dashboard appears in the browser URL field when you view the dashboard. For example, the Endpoint Management dashboard has id=default-endpoint-management appended to its URL. See View dashboards.
7. Select the Destination where you want Connect to send the dashboard. Provide any additional configuration for the type of destination you select.
8. (Optional) Configure a Schedule to send the dashboard.
9. Click Save.

When the connection runs, the dashboard is sent to the destination according to the schedule that you set. To manually export the dashboard using the connection settings, select the connection on the Connect Overview page and click Run Now.

Import dashboards

You can import dashboard configurations that are stored in a JSON file.

Dashboard write permission is required to import dashboards. To import dashboards that are associated with reports (through chart panels), Report write permission is also required. The predefined roles that have these permissions include Reporting Operator and Reporting User.

1. Copy the JSON file to a system that is accessible from the computer that you use to sign in to Tanium Console.

2. From the Main menu, go to Data > Dashboards and click Import.
3. Perform one of the following steps:
• Drag and drop the JSON file to the Import a Dashboard.json File dialog.
• Click Browse for File, select the JSON file, and click Open.
4. Review the list of dashboards in the File Contents, optionally clear any dashboards that you do not want to import, and click Import.

   If the file has no issues to resolve, the import proceeds and you can skip the next step. If the file has any issues that block the import, perform the next step to resolve them.

5. Resolve any issues in the file and click Import again:

• Name conflicts: If the JSON file contains dashboards or reports with the same names and content set assignments as dashboards or reports that already exist on Tanium Cloudthe Tanium Server, select one of the following options:

  • Skip Import to omit the dashboard or report from the import process.

  • Overwrite Existing to replace the existing dashboard or report with the imported dashboard or report. This option is not available if:

    • The existing report or dashboard is Tanium managed.
    • The imported report uses sensors that are not present in the environment where you perform the import.
    • The imported report has a Group By Column selection and either of the following conditions apply:

      • The imported report does not include the data source that the associated dashboard panel uses for the Group By Column or Aggregate selections. See Panel settings: basic.

      • The imported report uses a different sensor for flattening data than the existing report. See Flattened data.

  • Import as New to import the dashboard or report and retain its current name, notwithstanding that an existing dashboard or report has the same name.
  • Rename the dashboard or report that you are importing. When you select this option, a text field appears where you specify the new name.
• Invalid content set: If the dashboard or report is assigned to a content set that does not exist on Tanium Cloudthe Tanium Server, select one of the following options:
  • Skip Import to omit the dashboard or report from the import process.
  • Update Content Set to assign a valid content set. When you select this option, a dropdown appears for you to select a content set. The dropdown lists only the content sets for which you have role permissions.

If a dashboard panel requires a sensor that does not exist on Tanium Cloudthe Tanium Server or that is not registered with Tanium Data Service, a message indicates the sensor is missing. You can proceed with the import but it omits that panel and associated report. To import missing sensors, see Tanium Console User Guide: Import sensors.

Manage historical data

Historical data collection

Reporting collects data every 24 hours for dashboard charts. You can filter the data by a specific date or date range when you configure the chart (see Date/Timeframe) or when you view the dashboard (see Filter by Timeframe).

For details about the specific date and date range options for dashboard charts, see Date options.

Historical and current data

When you select a timeframe that includes current data for a dashboard chart, the chart shows the latest results from Tanium Data Service for the current data (see Data sources). If you select a timeframe that includes data from a past date, the chart shows the results that Reporting collects at scheduled intervals for that historical data. For example, if you set the timeframe to Last 7 Days for a line chart, the chart shows the current data for today and historical data for the previous six days.

Chart data sources

A dashboard chart source is the combination of the report that provides the data and the following optional chart settings:

• Group By Column: see Group By Column

• Aggregate: see Aggregate

  If you do not specify the Aggregate setting, the chart automatically aggregates the results by Count.

• Filter Group: see Filter Group
• Source filter: see Source

If you change any of these settings or select a different report for an existing chart and then save the dashboard, Reporting starts a new collection because that new combination comprises a new source. If no other charts use the previous source, Reporting stops collecting data for the previous source after 10 days and removes the collected data.

Historical data collection does not include data from before you created the chart panel, unless another chart panel with the same source already exists in the environment. Multiple charts can use the same source.

Scheduled and manual data collection

Reporting does not collect chart data when you create the report that provides the data source. Instead, data collection begins when you add a chart to a dashboard, and then save the dashboard. The chart shows a Collecting initial data message until the data exists. Reporting collects chart data for each source once every 24 hours. For example, if you save a dashboard with a new chart at 12 PM today, the first collection starts at that moment for the chart source and the next collection starts at 12 PM tomorrow.

You can run the collection process manually at any time for one or more sources, with a minimum of one hour between collections. Manual collections do not change the scheduled collections that Reporting runs. For example, if the next scheduled collection is at 12 PM today and you run a manual collection at 10 AM today, the next scheduled collection remains at 12 PM today instead of resetting to 10 AM tomorrow. To perform a manual collection, see Run data collections.

Computer group registration

Reporting collects historical data from all computer groups that are registered for collection. If you register a new computer group, dashboard charts do not show historical data from that group until the next collections complete for the sources of those charts. For details, see Register computer groups for collection.

View historical data sources

Perform the following steps to view details (such as collection status) about the sources that provide data for dashboard charts.

1. From the Main menu, go to Data > Settings > Historical Data Sources.

   The grid lists sources with the following information:

   Column	Description
   Source	Reporting names each source based on the name of the report that provides the data and on certain chart settings as described under Chart data sources. To see the error message associated with a failed collection run, expand the source.
   Status	The status of the last collection run for the source: Finished: The last collection run completed successfully. Pending: A collection run is in-progress. Failed: The last collection run did not complete successfully.
   Last Run	The date and time when the last collection run started.
   Next Collection	The date and time of the next collection run.
   Total Data	The amount of data in the last collection run.

   You can sort the grid by the Status or Last Run of a collection process.

2. (Optional) Enter a text string in the Filter by source field to show only sources with names that match the string.

3. Click the name of a source to view its details.

   The Source Details page contains the following information:

   Source Details section

   Field	Description
   Status	The status of the last collection run for the source: Finished: The last collection run completed successfully. Pending: A collection run is in-progress. A source might have multiple runs with the Pending state. Runs that time out or are overridden by another run might show the Pending state. Failed: The last collection run did not complete successfully.
   Report	The name of the report that contains the data.
   Group By Columns	The columns on which the data is grouped. If there are no columns listed, the data is grouped as a single aggregate. For details about the Group By Column or Aggregate settings, see Panel settings: basic.
   Filter Group	The chart shows data only from the specified filter group. If the chart has no filter group selection, this field is blank. See Filter Group.
   Source Filter	The chart shows only the data that matches the source condition that is specified for the chart. If no source condition is specified, this field is blank. See Source.
   Total Data	The amount of data in the last collection run.

   
   

   Schedule Details section

   Field	Description
   Collection Schedule	How often collection runs are scheduled for the source.
   Last Run	The date and time when the last run started.
   Last Updated	The data and time when the data for the collection was most recently updated. On successful runs, this field is the same as the Last Run field.
   Next Collection	The date and time of the next collection run.

   
   

   The Collection History section lists previous and current collection runs.

   You can sort  the grid by the Status or Last Run of a collection process.

   Collection History section

   Column	Description
   Status	The status of the collection run: Finished: The collection run completed successfully. Pending: A run is in progress. Failed: The last collection run did not complete successfully. To see the error message associated with a failed collection, expand the run.
   Report Rows	The total number of rows that the source collected.
   Grouped Rows	The number of rows collected that match the Grouped By Columns value.
   Computer Groups	The number of computer groups included in the collection.
   Duration	The amount of time it took to collect the data.
   Last Run	The date and time when the run started.
   Total Data	The amount of data that the run collected.

Run data collections

You can run the collection process manually at any time for one or more sources, with a minimum of one hour between collections.

1. From the Main menu, go to Data > Settings > Historical Data Sources.

2. Select the check boxes of the desired sources and click Run Collection.

   The collection run has Pending status until all the data is collected, at which point the status changes to Finished.