Viewing chart results

After you create a board and add panels, the charts on the board begin to display data based on the collection schedule of the underlying sources.

Open links from charts

When you view a board, you can click data points on charts to view the data in more detail.

You must have the Ask Dynamic Question permission to access links on charts that are based on saved question sources.

  1. From the Trends menu, click Boards.
  2. Click the board that you want to open.
  3. Click a data point on the chart. A menu displays with available options, if any. The options that display depend on the source of data for the chart:
    • For panels that use saved question sources, the menu contains options to display data in Tanium Interact. This includes options to view live results for all data points, or to view results filtered by the specified condition, with or without additional endpoint details.
    • For panels that use module sources, the menu contains options to display the data in the Tanium solution.

View results in panels

When you view a board, you can click a panel to view the data in more detail.

  1. From the Trends menu, click Boards.
  2. Click the title of the board that you want to open.
  3. Click the title of the panel that you want to view.
  4. (Optional) Click a data point on the chart to view the data in more detail.
  5. (Optional) From the Trends View tab, you can temporarily modify the following settings. When you leave the page, settings are not saved.
    SettingDescription
    Chart TypeSelect the type of data visualization to use in the panel. For more information, see Reference: Chart options in Trends.
    Computer Group(Saved question sources only) Select the computer group for which to display data in the panel. The computer groups include computer groups that are available to Trends and that you have access to. To edit which computer groups are available to Trends, see Configure visibility groups.
    Scale

    For vertical bar charts, area charts, and line charts, select how to scale values on the y-axis. Options include:

    • Linear - Use consistent values on the y-axis. For example, if the minimum data point on a chart is 1, and the maximum data point is 100, the y-axis values would be 0, 20, 40, 60, 80, and 100.
    • Logarithmic - Scale the y-axis on an exponential basis. Use this option for charts that contain a large range of data points.
    Date Range

    Select a date or date range to display in the chart. For available options by chart type, see Reference: Chart options in Trends.

    ItemsSelect specific items to include or exclude in the chart. The available items depend on the results that the source collects.

To permanently modify panel settings, click Edit. From the Edit Panel page, you can change any settings for the panel. For a list of settings, see Add panels to the board.

View live results

You can view the most recent data collected for panels that use saved question sources.

To view live results for a saved question source, you must have read sensor permission on the content set that contains the sensor used by the saved question source. For more information, see the Trends requirements.

  1. From the Trends menu, click Boards.
  2. Click the title of the board that you want to open.
  3. Click the title of the panel that you want to view.
  4. Go to the Results tab.

The Trends saved question appears along with the most recent results. For information on how to navigate the results, see Tanium Interact User Guide: Managing question results.

From the Results tab, you can drill down on results, copy or export the results, deploy actions, and open the saved question in Interact.

Drill down on the results

Trends stores aggregate results of questions for computer groups visible to Trends. Trends does not store the full question results over the course of collection. You cannot drill down to past point-in-time data on specific endpoints, although it is possible to drill down on the current data set. For example, you cannot use Trends to see what OS patch a specific computer was running on a specific date in the past. Instead, you can use Trends to view the most recent results about OS patches, and from recent results, you can drill down to results for specific computers.

Select one or more rows and click Drill Down to obtain more details about the matching results.

Deploy an action to one or more endpoints

Select one or more rows and click Deploy Action to deploy appropriate actions to the selected endpoints.

Open the question in Tanium™ Interact

Click Go to Interact to open the saved question in Interact where you can view additional question details, ask additional questions, and deploy corrective action to endpoints.