Tanium Asset
Tanium Asset is an asset management tool. You can bring your assets from Tanium Asset into Brinqa to construct a unified view of your asset inventory, thus strengthening your cybersecurity posture.
This document details the information you must provide for the connector to authenticate with Tanium Asset and how to obtain that information from Tanium. See create a data integration for step-by-step instructions on setting up the integration.
Required connection settings
When setting up a data integration, select Tanium Asset from the Connector drop-down. If you cannot find the connector in the drop-down, make sure that you have installed it first. You must provide the following information to authenticate Tanium Asset with Brinqa:
-
Server URL: Your organization's Tanium Asset platform URL.
-
API token: The API token associated with the Tanium Asset account, which must have permissions to log in to the API server and return data.
Generate a Tanium API token
For the Tanium Asset connector to use the Tanium API, you must provide an API token. To generate a token, follow these steps:
-
Login to your organization's Tanium Asset portal as an administrator.
-
Navigate to Administration > Permissions > API Tokens.
-
Click New API Token.
Complete the following fields:
-
Notes: (Optional) Provide a description for the API token.
-
Expiration: Provide an expiry time in days.
-
Persona: Click the drop-down and select the persona for which the token is associated with. For additional information on Personas, see Tanium documentation.
-
Trusted IP Addresses: Provide the external IP addresses, either IPv4 or IPv6, of the systems with which this token can be used to authenticate. You can use commas or new lines to indicate multiple IP addresses.
-
-
Click Create, and then click Yes in the Confirm Your Action dialog window.
Your API token displays. You cannot view the token after this. Copy and save it to a secure location.
If you do not have permissions to create an API token, contact your Tanium Asset administrator. For additional information, see Tanium documentation.
Additional settings
The Tanium Asset connector contains additional options for configuration:
-
Domain: The Tanium account domain name.
-
Page size: The maximum number of records to get per API request. The default setting is 1000. It is not recommended to go over 1000.
-
Skip certificate verification: Select this option to allow for untrusted certificates.
Types of data to retrieve
The Tanium Asset connector can retrieve the following types of data from the Tanium API:
Table 1: Data retrieved from Tanium
| Connector Object | Required | Maps to Data Model |
|---|---|---|
| Asset | Yes | Host |
The Tanium Asset connector does not currently support operation options for the types of data it retrieves.
For detailed steps on how to view the data retrieved from Tanium Asset in the Brinqa Platform, see How to view your data.
Attribute mappings
Expand the section below to view the mappings between the source and the Brinqa data model attributes.
Asset
Table 2: Asset attribute mappings
| Source Field Name | Maps to Attribute |
|---|---|
| asset | name |
| asset_is_managed | Local variable |
| chassis_type | Local variable |
| ci_installed_application | Local variable |
| ci_logical_disk | Local variable |
| ci_network_adapter | Local variable |
| ci_physical_disk | Local variable |
| ci_sql_server | Local variable |
| ci_siu_installed_product | Local variable |
| ci_siu_product_usage | Local variable |
| ci_windows_installer_application | Local variable |
| city | Local variable |
| cloud_instance_id | Local variable |
| computer_id | uid, Local variable |
| computer_name | name, hostnames |
| country | Local variable |
| cpu_core | Local variable |
| cpu_logical_cores | Local variable |
| cpu_manufacturer | Local variable |
| cpu_name | Local variable |
| cpu_processor | Local variable |
| cpu_speed | Local variable |
| created_at | sourceCreatedDate |
| department | Local variable |
| display_adapter_count | Local variable |
| disk_total_space | Local variable |
| domain_name | Local variable |
| eid | Local variable |
| endpoint_fingerprint | Local variable |
| id | uid |
| ip_address | ipAddresses, publicIpAddresses, privateIpAddresses |
| is_virtual | Local variable |
| last_seen_at | lastSeen |
| last_seen_in_tds | Local variable |
| manufacturer | manufacturer |
| model | model |
| number_of_fixed_drive | Local variable |
| number_of_logical_processor | Local variable |
| operating_system | os |
| os_platform | Local variable |
| os_version | currentVersion |
| phone_number | Local variable |
| ram | Local variable |
| serial_number | serialNumber |
| service_pack | Local variable |
| source_id | Local variable |
| STATUS | status |
| system_uuid | uid, Local variable |
| updated_at | sourceLastModified |
| uptime | Local variable |
| user_name | username |
Local variable indicates that the field is processed within a specific context, such as a particular workflow or calculation. Unlike other attributes, local variables aren't mapped to the unified data models. They only exist on the source data model.
APIs
The Tanium Asset connector uses the Tanium REST API. Specifically, it uses the following endpoint:
Table 3: Tanium Asset API endpoint
| Connector Object | API Endpoint |
|---|---|
| Asset | /plugin/products/asset/v1/assets |
Changelog
The Tanium Asset connector has undergone the following changes:
3.0.1
- Assets with a blank UID are now skipped during the sync process.
3.0.0
- Initial Integration+ release.