capabilities.work

Ask A Sensor Question And Get Results

A 4-step recipe with Tanium. We can help you get access.

Recipe · 4 steps

Ask A Sensor Question And Get Results

with Tanium

Resolve a sensor by name, ask a question selecting it, and read results.

  1. Resolve the sensor by name to obtain its name and hash for use in the question selection.
  2. Create and ask a question that selects the resolved sensor across managed endpoints.
  3. Poll the question by id until the server confirms it has been issued to endpoints.
  4. Retrieve the result data rows collected from responding endpoints for the confirmed question.
What you'll need to have ready
  • sessionToken: API token or session token passed in the session header.
  • sensorName: Name of the sensor to resolve and select in the question.
For your developer

Arazzo workflow tanium:sensor-question-results, 4 operations: getSensorByName → createQuestion → getQuestion → getQuestionResults. Specs on APIs.io.

More recipes with Tanium

Ask A Question And Get ResultsConnect Run A Connection On DemandDeploy A Package As An ActionThreat Response Live Connection And SnapshotRun A Saved Question By NameAsk A Question Scoped To A Computer Group