IMPORTANT: This site is planned to be decommissioned in 2026. Visit the Tanium Resource Center for all Tanium release notes, user guides, and support information. To view release notes in the Resource Center, see Tanium Release Notes.
IMPORTANT: If you are using semi-annual releases for on premises, see the Release notes for 2024H1 semiannual release, Release notes for 2024H2 semiannual release, or Release notes for 2025H1 semiannual release on the Tanium Resource Center.
Effective October 15, 2024: On prem release notes on the Tanium Knowledge Base are frozen. For release notes related to 7.4 or 7.5 Server and Solutions, see the Monthly updates for Tanium Version 7.4 and 7.5 Server and Solutions on the Tanium Resource Center.
Release Notes Trace (Version 2.7)
Thank you for choosing Tanium. This document is intended to document changes between releases of Tanium Trace.
Tanium Trace 2.7.10
Release Date: February 19, 2019
Resolved Issues
- Added support for upcoming Tanium Reveal 1.1.0.0000 release
Supported Tanium Platforms
Tanium Server 7.0, 7.1, 7.2, 7.3
Tanium Trace 2.7.9
Release Date: January 22, 2019
Resolved Issues
- Adds support for Sysmon 8.04
- Fixes an issue where some files were not removed in the Remove Tanium Trace Tools package
Security Update
This release includes security updates. Details of the issue, including affected versions, and mitigation information, can be obtained within Tanium's Support Portal, or by contacting your TAM.
Supported Tanium Platforms
Tanium Server 7.0, 7.1, 7.2, 7.3
Tanium Trace 2.7.8
Release Date: December 18, 2018
Resolved Issues
- Fixes a memory leak in the Linux event recorder
- Fixes an issue in the Windows event recorder to ensure that file permissions are recorded when Integrity Monitor is installed
- Fixes minor stability issues in the Mac event recorder
- Fixes an issue in the Tanium Trace Status sensor for Linux where it did not report correctly when the Tanium client was installed in locations besides the default
- Adds additional validation to snapshot uploads
Supported Tanium Platforms
Tanium Server 7.0, 7.1, 7.2, 7.3
Tanium Trace 2.7.7
Release Date: November 27, 2018
Resolved Issues
- Fixes an issue in the workbench where the backend service was being polled more than necessary
- Fixes an issue in the workbench where repeated failed requests might be sent to the backend service when an unexpected error occurs during snapshot/live connection searches
- Fixes an issue in the workbench where search results could have empty or undefined column data after switching to a different event search type
- Fixes an issue where the Distribute Tanium Trace Tools package could time out when installing Sysmon on endpoints that have a very large number of ETW subscribers
Supported Tanium Platforms
Tanium Server 7.0, 7.1, 7.2, 7.3
Tanium Trace 2.7.6
Release Date: October 30, 2018
Resolved Issues
- Fixes an issue where the console can hang, and memory in the Trace service process can grow if a live connection was ended abnormally (without a proper connection shutdown)
Supported Tanium Platforms
Tanium Server 7.0, 7.1, 7.2, 7.3
Tanium Trace 2.7.5
Release Date: October 23, 2018
Resolved Issues
- Adds signing of the Mac recorder and live connection binaries, which is required for macOS 10.14 (Mojave)
- Fixes an issue where the Remove Tanium Trace Tools action failed on Mac endpoints
Security Update
This release includes security updates. Details of the issue, including affected versions, and mitigation information, can be obtained within Tanium's Support Portal, or by contacting your TAM.
Supported Tanium Platforms
Tanium Server 6.5, 7.0, 7.1, 7.2, 7.3
Tanium Trace 2.7.4
Release Date: October 10, 2018
Resolved Issues
- Reduces missing command-lines in Windows process events
- Fixes an issue in the Linux event recorder where the recorder process was not being terminated when the CPU threshold is exceeded
- Fixes an issue in the Linux event recorder where, in rare circumstances, more than one recorder process could be launched
- Fixes issues where filters on process events were not persisting
- Fixes an issue that prevented the package to recreate event databases from executing on Mac OSX endpoints
- Fixes an issue where, in race circumstances, the service configuration could be corrupted
Supported Tanium Platforms
Tanium Server 6.5, 7.0, 7.1, 7.2, 7.3
Tanium Trace 2.7.3
Release Date: September 25, 2018
Resolved Issues
- Fixes an issue where modifying Group Configuration settings fails when there are a large number of Trace actions in the action history
- Fixes an issue where requests that have been terminated due to exceeding the expected response time are not properly cleaned up
- Adds logging to help troubleshoot issues with the live connection computer suggestions
Supported Tanium Platforms
Tanium Server 6.5, 7.0, 7.1, 7.2, 7.3
Tanium Trace 2.7.2
Release Date: August 21, 2018
Resolved Issues
- Reduces the overall CPU consumption in Linux and Mac event recorders
- Fixes a memory leak in the Linux and Mac event recorders
- Fixes an issue in the Linux and Mac event recorders where an incorrect process could be assigned to file events in rare circumstances
- Reduces the possibility of missing command-lines in the Windows event recorder
- Fixes an issue in the Windows event recorder where unnecessary archive DBs could be created under sustained heavy event load
- Fixes an issue where the troubleshooting package for Mac live endpoints did not include the expected contents
Tanium Trace 2.7.1
Release Date: July 26, 2018
Resolved Issues
- Fixes an issue in the Mac event recorder that caused it to crash on start
Tanium Trace 2.7.0
Release Date: July 24, 2018
Enhancements
- Adds the ability to collect troubleshooting information from live endpoints by clicking a button from a live endpoint connection
- Adds new warning messages when search time ranges overlap the recorder start or cutoff time that was last used by the recorder to clean old events
- Adds the Process ID to search results and search filtering
- Adds support for Sysmon 8.0
Resolved Issues
- Fixes an issue in the Linux/Mac event recorders where out of order or missing events could lead to high CPU utilization
- Fixes an issue in the Linux/Mac event recorders where a heavy file event volume could cause unexpected memory growth
- Fixes an issue in the Linux/Mac event recorders where a crash could occur when trying to record a large number of active processes at start time
- Fixes an issue in the Windows event recorder where command lines were not being recorded in native mode
- Fixes an issue where the workbench could become unresponsive after attempting to make live connections in environments with large numbers of endpoints
- Fixes an issue where uncompressed CSV files were left on the Module server after exports
- Fixes an issue where capturing snapshots of endpoints with hostnames that end with '.' failed
- Fixes an issue where generation of IOCs from DNS evidence was failing
- Fixes a regular expression for searching malicious processes in the Enterprise Hunting section of the workbench
- Fixes an issue where evidence could not be added from the event history when navigating to a process via direct URL
- Fixes an issue where files in packages were stuck in the pending state on Tanium 7.3
- Fixes some inconsistency issues in the home page
- Fixes an issue where the Connect button was not activating after live connections timed out
Known Issues and Workarounds
- There is a known issue where command lines sometimes stop recording on Windows when using Sysmon