Release Notes Performance (Version 1.4)

Thank you for choosing Tanium. This document is intended to document changes between releases of Tanium Performance.

Tanium Performance 1.4.3.0018

Release Date: May 26th, 2020

Feature Improvements

• Updates to the direct connect page.
  • Adds ability to kill processes through the live process monitor.
    • Adds kill process privilege.
  • Adds annotations on charts to denote when performance events are occurring.
    • Adds controls to turn on or off these annotations.
    • Adds tooltips per event type to provide additional context.
  • Adds file browsing to enable file downloads.
  • Adds filter boxes to the Events, Application Crashes, and System Crashes grids.
  • Adds time zone user preference. Select between browser or UTC time.
  • Adds columns to live process monitor grid: Command lines, I/O Reads, I/O Reads Bytes, I/O Writes, I/O Write Bytes, Handles, Threads.
  • Remembers state of page as users navigate away and back. This includes:
    • Expand and collapse section state.
    • Scope selection.
    • Chart metric selection.
    • Network and disk selection.
  • Adds ability to add process to direct connect charts from live process view.
  • Adds details to the event table for the following event types: Disk Capacity, Disk Latency, Memory, CPU.
  • Moves endpoint details to info tooltip near endpoint name at top of the page.
  • Adds endpoint summary section which includes live updating CPU, memory, and disk statistics.
• Updates to Performance roles:
  • Adds Performance Read-Only User role.
  • Adds process kill privilege to Performance User role.
  • Adds Performance Operator role.
    • Can view events, Direct Connect, read and write profiles. Can do Direct Connect actions, like kill process.
    • Cannot read and write service account and gather service logs.
  • Adds Performance File Download privilege to Administrator, Operator, and User roles.
• Updates profile name profile list page to link to the profile edit page.
• This release upgrades to Tanium Python version 1.3.0.44 with installer version 1.3.2.

Resolved Issues

• Fixes memory statistics on macOS endpoints.
• Fixes missing system memory statistics on Linux.
• Fixes issue where Performance actions were not logging to the action log.
• Improves calculation for disk percentage metrics.
• Fixes issue where Performance - TSDB Status sensor determines enabled state incorrectly.
• Fixes issue where lots of bug check codes didn’t scale on the system crashes chart.
• Fixes issue where profile thresholds were not being validated.
• Fixes issue where removing a profile on an endpoint with multiple profiles does not regenerate the event rules.
• Fixes hung endpoint process that can happen in some shutdown scenarios.
• Improves CPU metrics
• Fixes issue where the service account appears to be lost over time.

Security Update

This release includes security updates. For details, including affected versions and mitigation information, see the Tanium Support Portal, or contact your TAM.

Known Issues and Workarounds

• File browsing on Windows does not show files impacted by file system redirection.
• Available Memory calculation on macOS does not take into account cached memory, which can lead to reports of low available memory.

Requirements

• Tanium Platform 7.2 or later
• Tanium Client Version 7.2.314.3211 or later
• Tanium Direct Connect 1.0 or later
• File downloads feature requires Tanium Direct Connect version 1.3.1.
  • With Tanium Direct Connect 1.2 or later, Performance can Direct Connect to endpoints that communicate through a Zone Server.
• The releases of Tanium Trace 2.9.0.0035, Threat Response 1.2.0.0037, Map 1.1.1.0006, and Integrity Monitor 1.7.0.0035 and later all include a significant update to how the endpoint recorder technology is distributed and managed. Performance cannot be installed on an endpoint running an earlier version of these modules.