Other resources

Release Notes

Support Knowledge Base
(login required)


The addition of Trends to a Tanium™ deployment provides visibility into the history of key pieces of information about the enterprise IT estate, the ability to coordinate with real-time status for those same indicators, and the ability to deploy actions on an endpoint—all without leaving the Tanium Console session.


Use Trends to:

  • Collect data from the endpoints across the enterprise to present visualizations of historical counts for information related to hardware and software inventory, operational hygiene, and endpoint security posture.
  • Create organized collections of boards and panels to display the collected data in impactful charts.
  • Customize the chart type, date or date range, color scheme, and text for each panel.
  • Set data condition thresholds that trigger visual status indicators (for example, red, yellow, or green panel backgrounds).
  • Publish boards to a file that you can distribute to stakeholders or post to an internal web server.
  • Navigate from historical trends to current, real-time status for the same key question, returned in the familiar results grid, where you can use the merge and drill-down features to examine the details.
  • Further explore question results that display in a panel by opening the question in Tanium™ Interact where you can deploy and schedule actions as necessary.

There are four primary concepts that you need to know to use Trends: sources, panels, boards, and sections.


A source is a configuration that defines a Trends saved question, how often to issue the question, and when to collect results from the endpoints. Every source issues its saved question to all computer groups visible to Trends.

A Trends saved question can ask for results from only one sensor. The sensor can be a single column sensor, a multicolumn sensor, or a parameterized sensor.

For information about sources, see Working with sources.


A panel displays a visualization for data collected by a source. When you create or edit a panel, select the source to use and the default computer group to show data for. When the source uses a multicolumn sensor, you can choose which column to display. You can also customize the chart type, date range, color scheme, and more.

Panels depend on sources; you must create a source before you create a panel that uses the source.

For information about adding panels to a board, see Building and publishing boards. For information about working with panels, see Viewing results in panels.


A board organizes a collection of panels. You can create and edit boards to add panels, and you can publish boards to downloadable HTML files.

For information about how to create, edit, and publish boards, see Building and publishing boards.


A section is a collapsible division on a board that you can use to further group panels. A board can have multiple sections and each section can contain multiple panels. Sections are optional. By default, boards do not contain any sections.

For information about adding sections to a board, see Building and publishing boards.

Last updated: 10/2/2018 2:31 PM | Feedback