Reference: Reveal settings
To access Reveal settings from the Reveal Overview page, go to Settings 
and click Settings.
Reveal service settings
| Setting | Default value | Description |
|---|---|---|
| Enable Sensitive Data Logging | false | Include search details and file paths in audit logs. |
| Rule Publication Interval | 12 hours |
The time interval to automatically deploy rule and rule sets assignments to endpoints. |
| Validation Publication Interval | 30 minutes | The time interval to automatically deploy pending validations. |
| Rule Results Scan Interval | 1800 seconds | The frequency to gather rule results metrics from endpoints. |
| Tools Deployment Distribute Over Time | 1200 seconds | The time period to distribute tools to target endpoints. |
| Tools Deployment Reissue Interval | 3600 seconds |
The frequency to run the action to deploy tools. |
| Process Endpoint Distribute Over Time | 1200 seconds | The time period to distribute indexing packages to target endpoints. |
| Process Endpoint Reissue Interval | 3600 seconds |
The frequency to run the action to index endpoints. |
| Live Connection Max Files | 1000 files | Any files with a MIME type that are not already contained in another category. |
| Live Connection Max Snippets | 1000 snippets | The maximum number of snippets retrieved from a file from an endpoint. |
| Live Connection Page Expiration | 60 minutes | The security setting to expire URLs after the specific period. |
| Live Connection URL Scope | session | The security setting to share connection urls across users, scope them to the user, or to the users current session. |
| Rule Set Profile Distribute Over Time | 1200 seconds | The time period to distribute rule set profiles to target endpoints. |
| Rule Set Profile Reissue Interval | 3600 seconds | The frequency to run the action to deploy rule set profiles. |
| Rules Distribute Over Time | 1200 seconds | The time period to distribute rules to target endpoints. |
| Rules Profile Reissue Interval | 3600 seconds | The frequency to run the action to deploy rules. |
| Validations Deployment Distribute Over Time | 1200 seconds | The time period to distribute validations to target endpoints. |
| Validations Reissue Interval | 3600 seconds | The frequency to run the action to deploy validations. |
| Package File Cache Timeout | 300 seconds | The amount of time to wait for the Tanium Server to cache files for packages. Package and action creation fail if this timeout is exceeded. |
| Package Download Timeout | 1800 seconds | The amount of time to allow for Reveal package to download before timing out. |
| Time Sync Frequency | 10 minutes | How frequently to send out a time sync package. |
| Time Sync Distribute Over Time | 1200 seconds | The time period to distribute the time sync to target endpoints. |
| Vocabulary Sampling Interval | 600 seconds | The time period between when vocabulary sampling questions are sent out. |
| Decimation Schedule Automatic Deployment Interval | 48 hours | How frequently the decimation schedule gets recreated. |
| Decimation Schedule Expiration Period | 7 days | How long a decimation schedule is valid. |
| Global Vocabulary Decimation Threshold | 50 percent | Global completion percentage to reach before decimating the global vocabulary. |
| Decimation Scheduler Horizon | 21 days | How far into the future the decimation scheduler will attempt to predict. |
| Decimation Scheduler Growth Factor Gain | 1 percent | Determines how much effect each sampling status has on the growth factor. |
| Decimation Scheduler Deploy Frequency | 24 hours | The maximum amount of time allowed to pass before a new decimation schedule is deployed. |
| Decimation Scheduler Distribute Over Time | 1200 seconds | The time period to distribute decimation scheduler to endpoints. |
| Decimation Schedule Reissue Interval | 3600 seconds | How frequently the action to deploy the decimation schedule runs. |
Endpoint configuration settings
| Setting | Default value | Description |
|---|---|---|
| Path Filter Exclusions | none | Paths to exclude from parsing in regular expression format. For example: .*\.docx filters any files that end with the .docx file extension. |
| Path Stem Exclusions | none | Path stems represent absolute paths to exclude from parsing. For example: C:\Program Files (x86)\Tanium\Tanium Client\ filters all content under Tanium Client. |
| Maximum File Batch Size | 100000 files | The maximum files to process per index operation. |
| Maximum Text Content | 1024 KB | The maximum amount of text content to extract per file. |
| Maximum Document Per DB Shard | 10000 files | The maximum number of documents per database shard. |
| Maximum Database Size | 1024 MB | The maximum size of the Reveal database. |
| Maximum Size Non-Streamable File Formats | 32768 KB | The maximum size of non-streamable file formats to index. |
| Minimum Available Disk Space | 2048 MB | The minimum amount of available disk space required to start an indexing operation. |
| Context Characters | 100 characters | The number of characters to include on either side of a pattern hit. |
| Tanium Index Max Query Files | 1000 files | The maximum number of files to request from Tanium Index at a time. |
| Max Files on Prune | 10000 files | The maximum number of files to process per prune operation. |
| Minimum Document Frequency | 5 documents | The minimum number of documents required to include a term in the global vocabulary. |
| (Internal) Vocabulary Sampling Exponent | -10 | The vocabulary sampling rate. |
| (Internal) Vocabulary Builder Decimation Coefficient | .5 | The decimation coefficient used by the vocabulary builder. |
Index configuration settings
| Setting | Default value | Description |
|---|---|---|
| Maximum CPU | 3% |
The maximum percentage of CPU that Tanium Index can use. |
| Rescan Interval | 3600 seconds | The frequency that Tanium Index scans. |
| Exclude from Hashing | none | Regex paths to exclude from hashing. |
Last updated: 3/2/2021 12:56 PM | Feedback