Configure Service Graph Connector for Tanium using the guided setup
Set up scheduled import jobs to pull in data from Tanium into your Configuration Management Database (CMDB).
Antes de Iniciar
To use this Service Graph Connector, you need a subscription to a Subscription Unit that is based in the IT Operations Management (ITOM) Visibility application or in the ITOM Discovery application. As defined in the section titled "Managed IT Resource Types" in ServiceNow Subscription Unit Overview for your subscription, for managed IT resources that are created or modified in the CMDB by this Service Graph Connector, but that aren’t yet managed by ITOM Visibility or ITOM Discovery, these resources will increase Subscription Unit consumption from that application. Review your current Subscription Unit consumption within ITOM Visibility or ITOM Discovery to ensure available capacity.
- The Integration Commons for CMDB store app, which is automatically installed.
- The CMDB CI class models store app, which is automatically installed. See CMDB CI Class Models app.
- The Datastream Action plugin (com.glide.hub.action_type.datastream), which is automatically installed.
Role required: admin
Por Que e Quando Desempenhar Esta Tarefa
Procedimento
-
Ensure that the application scope is set to the Service Graph Connector for Tanium application by using the application picker.
For more information, see Application picker.
- Navigate to All > Service Graph Connectors > Tanium > Setup.
- On the Getting started page, select Get Started.
-
Configure the authentication credentials and HTTP connection.
- On the Service Graph Connector for Tanium page, in the Configure the Connection and Credentials section, select Set authentication type.
- For the Set authentication type task, select Configure.
-
Specify the system property details for the authentication type.
- In the Value field, enable either token-based authentication or basic authentication.
- To enable the basic authorization, enter basic.
- To enable the token-based authorization, enter token.
Nota:Tanium Platform 7.6.2 supports only token-based authorization for an on-premise setup. To use Tanium Platform 7.6.2 or later versions, enable the token-based authorization type and enter the details for the token-based authorization in the next step. - Select Update.
- Set the Set authentication type task to complete by selecting Mark as Complete.
- In the Value field, enable either token-based authentication or basic authentication.
-
Configure your credentials based on the selected authentication type.
- For the basic authorization type:
- For the Configure the Basic auth Credentials task, select Configure.Nota:The Configure the Basic auth Credentials task appears only when you have specified basic as the value in the step 4.c.i.
- In the Name field, enter a name for the authentication.
For example, Tanium credentials.
- In the User name and Password field, enter your Tanium user name and password.
- Select Update.
- Set the Configure the Basic auth Credentials task to complete by selecting Mark as Complete.
- For the Configure the Basic auth Credentials task, select Configure.
- For the token-based authorization type:
- For the Configure the Token auth Credentials task, select Configure.Nota:The Configure the Token auth Credentials task appears only when you have specified token as the value in the step 4.c.i.
- In the Name field, enter a name for the authentication.
For example, Tanium credentials.
- In the API Key field, enter your Tanium token.
- Select Update.
- Set the Configure the Token auth Credentials task to complete by selecting Mark as Complete.
- For the Configure the Token auth Credentials task, select Configure.
- For the basic authorization type:
-
Configure the connection.
- For the Configure the Connection task, select Configure.
- Update the Host field with a Tanium base URL or IP address.
For example, demotaniumhost.com or 127.0.0.1. If you are using a Tanium cloud instance, enter API at the end of your base URL, such as demotaniumhost-API.com.
- If you are using anything other than https, then update the Protocol field.Nota:If the Tanium server connection requires a MID Server setup, select the Use MID server check box and select the MID Server. For more information about the Tanium API, see the Tanium Developer documentation.
- Select Update.
- Set the Configure the Connection task to complete by selecting Mark as Complete.
-
Configure the connection based on the authentication type.
- For the basic authorization type:
- For the Configure the Basic auth Credentials task, select Configure.Nota:The Configure the Basic auth Credentials task appears only when you have specified basic as the value in the step 4.c.i.
- Select Edit for Basic authentication within the sn_tanium_integ scope.
- In the Connection Information section of the Edit Connection window, fill in the fields.
Tabela 1. Connection Information Field Description Connection name Name to identify the Tanium connection record. Token-based authenticationis the default credential alias name and is read-only.Host name Base URL or IP address of the Tanium server. Nota:This field is automatically set to the URL to connect to the application. Leave the field value as is. - (Optional) If a MID Server is required for the Tanium server connection, select the Use MID Server check box. Then, select the MID Server-related fields accordingly.
- In the Credential Information section, enter the Tanium account user name in the Username field and the password in the Password field.
- Select Edit connection.
- Return to the guided setup page.
- Set the Configure the Basic auth Credentials task to complete by selecting Mark as Complete.
- For the Configure the Basic auth Credentials task, select Configure.
- For the token-based authorization type:
- For the Configure the Token auth Credentials task, select Configure.Nota:The Configure the Token auth Credentials task appears only when you have specified token as the value in the step 4.c.i.
- Select Edit for Token-based authentication within the sn_tanium_integ scope.
- In the Connection Information section of the Edit Connection window, fill in the fields.
Tabela 2. Connection Information Field Description Connection name Name to identify the Tanium connection record. Token-based authenticationis the default credential alias name and is read-only.Host name Tanium base URL or IP address. Nota:This field is automatically set to the URL to connect to the application. Leave the field value as is. - (Optional) If a MID Server is required for the Tanium server connection, select the Use MID Server check box. Then, select the MID Server-related fields accordingly.
- In the Credential Information section of the Edit Connection window, enter the authentication token for the Tanium API in the Token field to grants access to Tanium data.
- Select Edit connection.
- Return to the guided setup page.
- Set the Configure the Token auth Credentials task to complete by selecting Mark as Complete.
- For the Configure the Token auth Credentials task, select Configure.
- For the basic authorization type:
-
Test the connection.
- For the Test connection task, select Configure.
- Select the Test Connection related link to start the testing process.
- When the Status field is set to Success, return to the guided setup page.Nota:If any of the tests have errors, follow the suggestions for remediation.
- Set the Test the connection task to complete by selecting Mark as Complete.
-
Create a custom view.
Nota:The integration depends on a custom view from Tanium.
- Configure the view on your Tanium instance.
- On your Tanium instance, navigate to Modules > Asset.
- Select Views.
- If you have not done so already, create the ServiceNow (reserved) view by selecting Create View > Create ServiceNow view.Nota:By default, the ServiceNow (reserved) view is non-editable.
- Create a copy of the view to edit it.
- Edit the copy.
- Add all fields from the SIU Product Usage bucket.
- Add Asset to the Last Seen field.
- Add Network Adapter to the Model field.
- Save the view.
- Select the view on your ServiceNow instance.
- In the guided setup, for the Configure the View task, select Configure.
- In the ServiceNow instance, select the view you created in step 4.h.i.
- Select Set View.
- Set the Configure the View task to complete by selecting Mark as Complete.
- Configure the view on your Tanium instance.
- In the ADM setup instruction section, ignore the instructions as application dependency mapping is not supported currently.
-
Test the connection.
- For the Test the Connection task, select Configure.
- Close the Test the connection window that appears when the test is completed.
- Set the Test the Connection task to complete by selecting Mark as Complete.
Testing the connection might take a few moments. The page is refreshed to show the test results.
If any of the tests have an error code or message or error sign, the connection failed and further troubleshooting is required.
-
Configure the Tanium scheduled jobs.
- For the Configure the Scheduled Import task, select Configure.
- Select the scheduled job that you want to activate.
-
On the Scheduled Data Import form, verify the field values for a scheduled job and select the Active check box to activate the scheduled job.
Nota:When using a token-based authentication, the user you specify in the Run as field for a scheduled job must have the connection_admin role.
For more information, see Schedule a data import.
- Select Update.
- Repeat the steps 5.b to 5.d for each scheduled job for data import.
- Set the Configure the Scheduled Import task to complete by selecting Mark as Complete.
- Opcional:
Add multiple instances.
Nota:If you don't need to add multiple instances, you can skip this step.
- On the Service Graph Connector for Tanium page, in the Add Multiple Icons section, select the Update Data Source Access task.
- On the next page, in the Update Data Source Access section, select Configure.
- Select the Data Source [sys_data_source] table.
- Select the Global application scope by using the application picker.
- In the Application Access related list, select the Can create, Can update, and Can delete check boxes, if not already selected.
- Select Update to close the tab and return to the guided setup.
- Modify the application scope again to Service Graph Connector for Tanium by using the application picker.
- Set the Update Data Source Access task to complete by selecting Mark as Complete.
- Repeat the steps 6.d to 6.g for the Update Scheduled data import access task with the Scheduled data import [scheduled_data_set] table and set the task to complete by selecting Mark as Complete.
-
Clear the cache for the new connection.
- For the Clear Cache for Datasource and Import set task, select Configure.
- In the Run script text box of the background
script page, enter the following
script:
GlideTableManager.invalidateTable("sys_data_source"); GlideCacheManager.flushTable("sys_data_source"); GlideTableManager.invalidateTable("scheduled_import_set"); GlideCacheManager.flushTable("scheduled_import_set"); GlideTableManager.invalidateTable("sys_db_object"); GlideCacheManager.flushTable("sys_db_object"); - Select Run Script to run the background script in
the global scope.
The script may take several minutes to execute.
- After the script is executed, select Close.
- From the application picker, select the Service Graph Connector for Tanium application.
- Set the Clear Cache for Datasource and Import set task to complete by selecting Mark as complete.
-
Add a basic authorization connection to another Tanium instance.
Nota:Tanium Platform 7.6.2 supports only token-based authorization for an on-premise setup. To use Tanium Platform 7.6.2 or later versions, use the token-based authorization.
- For the Add Another Basic Auth Connection task, select Configure.
- To create a new connection, select Add Connection.
- Enter the connection details on the Create Connection form.
- Select Create Connection.
- Navigate back to the guided setup and set the Add Another Basic Auth Connection task to complete by selecting Mark as Complete.
-
Add a basic authorization connection to another Tanium instance.
Nota:Tanium Platform 7.6.2 supports only token-based authorization for an on-premise setup. To use Tanium Platform 7.6.2 or later versions, use the token-based authorization.
- For the Add Another Basic Auth Connection task, select Configure.
- To create a new connection, select Add Connection.
- On the form, fill in the fields.
Tabela 3. Create Connection form Field Description Connection Name Display name for the connection. Connection URL Connection Host name for Tanium. User name User name for Tanium authentication. Password Password for Tanium authentication. - Select Create Connection.
- Navigate back to the guided setup and set the Add Another Basic Auth Connection task to complete by selecting Mark as Complete.
-
Add a token-based authorization connection to another Tanium instance.
- For the Add Another Token Auth Connection task, select Configure.
- To create a new connection, select Add Connection.
- On the form, fill in the fields.
Tabela 4. Create Connection form Field Description Connection Name Display name for the connection. Host Name Host name for Tanium. Token Token name for Tanium. - Select Create Connection.
- Navigate back to the guided setup and set the Add Another Token Auth Connection task to complete by selecting Mark as Complete.
-
Add a token-based authorization connection to another Tanium instance.
- For the Add Another Token Auth Connection task, select Configure.
- To create a new connection, select Add Connection.
- Enter the connection details on the Create Connection form.
- Select Create Connection.
- Navigate back to the guided setup and set the Add Another Token Auth Connection task to complete by selecting Mark as Complete.
-
Set up the MID Server for the connection you created.
- For the Configure MID Server task, select Configure.
- Select the name of the connection you created earlier.
- Select the Use MID server check box.
- Select Update.
- Navigate back to the guided setup and set the Configure MID Server task to complete by selecting Mark as Complete.
-
Set configuration properties for newly added connections.
- For the Set configuration properties task, select Configure.
- From the Name column, select the new connection.
- In the Service Graph Connection Properties related list, review and modify the following properties.
Field Value max_retry_count Determines the number of retry attempts triggered for a Tanium Asset REST action in case of failure. pagination_record_count Specifies the page size for each API call made during a Tanium Application Data REST action. rest_action_limit Specifies the page size for each API call made during a Tanium Asset REST action. view_id Specifies the identifier used to fetch hardware and software data from a specific Tanium view. To modify the view identifier, access the SG Tanium Connection [sn_tanium_integ_connection] table. - Return to the guided setup page.
- Set the Set configuration properties task to complete by selecting Mark as Complete.
-
Test the newly added connections.
- For the Test connections task, select Configure.
- From the Name column, select the new connection.
- Select the Test Connection related link to start the testing process.
- When the Status field is set to Success, return to the guided setup page.Nota:If any of the tests have errors, follow the suggestions for remediation.
- Set the Test connections task to complete by selecting Mark as Complete.
-
Set the Tanium view for the connection.
- For the Set view task, select Configure.
- In the Connection and Credentials Alias field, search for and select the alias created earlier in the Add Another Basic Auth Connection or Add Another Token Auth Connection task.
- In the View field, search for and select the corresponding Tanium view associated with the connection.
- Select Set View.
- Set the Set view task to complete by selecting Mark as Complete.
-
Generate data sources and scheduled imports for the new connection.
- For the Generate Data Sources and Scheduled Imports task, select Configure.
- On the form, fill in the fields.
Field Value Connection and Credential Alias Connection alias that was created in the previous step. View Tanium view you want to load. - Select Generate Data source and Scheduled import.
- Set the Generate Data Sources and Scheduled Imports task to complete by selecting Mark as Complete.
- Skip the ADM setup for multi instance task as ADM is not supported currently.
-
Configure the Tanium scheduled job.
- For the Configure the Scheduled Imports task, select Configure.
- Select the scheduled data import that you want to activate.
- On the Scheduled Data Import form, verify the field values for the scheduled job and select the Active check box.Nota:When using a token-based authentication, the user you specify in the Run as field for a scheduled job must have the connection_admin role.
For more information, see Schedule a data import.
- Select Update.
- Repeat steps 6.l.ii to 6.l.iv for each scheduled job for data import.
- Set the Configure the Scheduled Imports task to complete by selecting Mark as Complete.
- Opcional:
Use the advanced settings to manage excluding the serial number population on the IBM
AIX and Oracle
Solaris operating system (OS) platforms.
- In the Advanced section of the guided setup, for the Advanced Settings task, select Configure.
- To exclude the serial number population, enter false in the Exclude the serial number population field.
- Select Save.
- Close the window and set the Advanced Settings task to complete by selecting Mark as Complete.