Gain visibility into operational health by creating charts that show historical and current data from endpoints.
Use Trends to:
- Collect data from the endpoints in your environment to create charts of historical counts for information related to endpoint security and operational health data.
- Receive data from other Tanium modules to create charts that show the usage and impact of the modules.
- Create organized collections of boards and panels to display the charts.
- Customize the chart type, date or date range, color scheme, and text for each panel.
- Set data condition thresholds that trigger visual status indicators (for example, red, yellow, or green panel backgrounds).
- Publish boards to a file that you can distribute to stakeholders or post to an internal web server.
- Navigate from historical trends to current, real-time status for the same key question, returned in the familiar results grid, where you can use the merge and drill-down features to examine the details.
- Further explore saved question results that display in a panel by opening the question in Tanium™ Interact where you can deploy and schedule actions as necessary.
There are four primary concepts that you need to know to use Trends: sources, panels, boards, and sections.
A source is a configuration that defines where data originates. In Trends, sources provide data to build charts. There are two types of sources:
Saved question source
A saved question source is a configuration that defines a Trends saved question, how often to issue the question, and when to collect results from the endpoints. Every source issues its saved question to all computer groups visible to Trends.
Trends contains an initial gallery that you can import which includes sample saved question sources. You can edit these saved question sources, create your own, and delete saved question sources. For more information on the initial gallery, see Importing the initial gallery.
A Trends saved question can ask for results from only one sensor. The sensor can be a single column sensor, a multicolumn sensor, or a parameterized sensor.
A module source is a configuration that defines data that a Tanium module provides to Trends. The module source validates and aggregates data that the module provides. You cannot create or edit module sources, but you can disable them to stop data movement.
For information about sources, see Working with sources.
A panel displays a visualization for data collected by a source. When you create or edit a panel, select the source to use and the default computer group to show data for. When a saved question source uses a multicolumn sensor, you can choose which column to display. You can also customize the chart type, date range, color scheme, and more.
Panels depend on sources; you must create a saved question source or select a module source before you create a panel that uses the source.
A board organizes a collection of panels. You can create and edit boards to add panels, and you can publish boards to downloadable HTML files.
For information about how to create, edit, and publish boards, see Building and publishing boards.
A section is a collapsible division on a board that you can use to further group panels. A board can have multiple sections and each section can contain multiple panels. Sections are optional. By default, boards do not contain any sections.
For information about adding sections to a board, see Building and publishing boards.
This documentation may provide access to or information about content, products (including hardware and software), and services provided by third parties (“Third Party Items”). With respect to such Third Party Items, Tanium Inc. and its affiliates (i) are not responsible for such items, and expressly disclaim all warranties and liability of any kind related to such Third Party Items and (ii) will not be responsible for any loss, costs, or damages incurred due to your access to or use of such Third Party Items unless expressly set forth otherwise in an applicable agreement between you and Tanium.
Further, this documentation does not require or contemplate the use of or combination with Tanium products with any particular Third Party Items and neither Tanium nor its affiliates shall have any responsibility for any infringement of intellectual property rights caused by any such combination. You, and not Tanium, are responsible for determining that any combination of Third Party Items with Tanium products is appropriate and will not cause infringement of any third party intellectual property rights.
Last updated: 2/5/2019 1:23 PM | Feedback