Use the Service Graph Connector for Tanium to bring in hardware, software, and software usage data from a Tanium environment into your ServiceNow instance.

Request apps on the Store

Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

Supported versions

Table 1. Versions
Tanium ServiceNow
  • Tanium 1.9 or later versions for hardware and software
  • Tanium 1.17 or later versions for software usage
  • Washington DC
  • Xanadu
  • Yokohama

Important information for upgrading Service Graph Connector for Tanium

Tanium Platform 7.6.2 or later versions support token-based authorization only. After you have installed the latest version of the Service Graph Connector for Tanium, verify the following configurations to use Tanium Platform 7.6.2 or later versions in your on-premise setups:
  • For a single instance, reconfigure the authentication type of an existing connection to use token-based authorization.
  • For multiple instances, deactivate the existing scheduled jobs for previously configured instances that used basic authorization, and then create and configure new instances to use token-based authorization.

Configuring a connection for the connector

You can configure a connection for the connector by using the SGC Central view in the CMDB Workspace. The view enables you to discover and install connectors, and then effectively manage the full life cycle of creating, editing, monitoring, and debugging connections. To configure the connector using SGC Central, see Configure Service Graph Connector for Tanium using SGC Central.
Important: Unless there are configuration issues, use the SGC Central view in the CMDB Workspace to configure the connection for the connector, as the guided setup method is being deprecated.

CMDB integrations dashboard

The Integration Commons for CMDB store app provides a dashboard with a central view of the status, processing results, and processing errors of all installed integrations. You can see metrics for all integration runs. You can filter the view to a specific CMDB integration, a specific time duration, or a specific integration run. For more details about monitoring Tanium integrations in the CMDB Integrations Dashboard, see Using the CMDB Integrations Dashboard.

Data mapping

Data from the Tanium data sources is mapped and transformed into the ServiceNow CMDB Configuration Item (CI) class definitions using the Robust Transform Engine (RTE). Data is inserted into the ServiceNow CMDB using the Identification and Reconciliation Engine (IRE).

The following table describes the data sources, the staging tables, and the target tables including CMDB CI and non-CMDB CI classes for the Tanium application.
Table 2. Data mapping for Tanium
Data source Staging table Target tables Resource types
SG-Tanium Applications SG-Tanium Applications [sn_tanium_integ_sg_tanium_applications]

Application

Running Process

TCP

 Applications
SG-Tanium Hardware and Software SG Tanium Import [sn_tanium_integ_sg_tanium_import]

Computer

File System

Disk

IP Address

When the Software Asset Management (SAM) application isn't installed:

Software

Software Instance

When the SAM application is installed:

Software Installation

 Server and software
SG-Tanium Usage SG Tanium Usage Import [sn_tanium_integ_sg_tanium_usage_import]

Software Usage [samp_sw_usage]

 None
SG-Tanium Remove Software Integration Commons Remove Record [sn_cmdb_int_util_remove_record]

None

 None
Note:
  • The SG-Tanium Usage data source is available only when the Software Asset Management Professional plugin (com.snc.samp) plugin is activated on your ServiceNow instance. See Request Software Asset Management.
  • The SG-Tanium Remove Software data source creates import sets and uses the transform map-based method for removing any target records for software data that weren't updated in the last delta query check. See Managing CMDB data deletion.
  • Starting with the Service Graph Connector for Tanium 1.8.0 release, a buffer time is added for software removal when the buffer_days_from_last_scan_for_hardware system property is enabled. When this system property is enabled, the software removal candidate is removed only if the last scan time of the hardware on which the software removal candidate is installed is earlier than the last success import time + buffer time. To enable this property, set the value of the buffer_days_from_last_scan_for_hardware system property to a non-zero numeral value according to the number of days of buffer that you require. To disable this property, set the value to 0.

You can use the IntegrationHub ETL app to view the data maps. See IntegrationHub ETL for more information.

Additional resource

How do I configure the Tanium Service Graph Connector? article on the ServiceNow Community site