--- title: "Tanium Asset" slug: "tanium-asset" updated: 2025-01-21T03:15:53Z published: 2025-01-21T03:15:53Z canonical: "help.nucleussec.com/tanium-asset" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.nucleussec.com/llms.txt > Use this file to discover all available pages before exploring further. # Tanium Asset ## **Overview** Nucleus enables you to sync assets discovered by Tanium into your Nucleus project the Tanium connector. The connector integrates with the Tanium Asset and Connect modules to seamlessly sync data into your Nucleus project to create and enrich assets. The Tanium Connector leverages the Tanium Connect module to receive data from Tanium at scale. **What is Tanium Connect?** [Tanium Connect](https://help.tanium.com/bundle/ug_connect_cloud/page/connect/overview.html) is a Tanium Product Module designed to integrate Tanium with other systems that you own and operate. Unlike other Nucleus integrations, the best practices for integrating into Tanium is to setup a connection with Tanium Connect that pushes data to Nucleus on a schedule. As such, Nucleus will not be interacting directly with Tanium. Users within Nucleus will not be able to request fresh data; the data will instead refresh as it is uploaded from Tanium to Nucleus. The Tanium Connect schedule is completely configurable on the Tanium side. It's important to configure the reports from Tanium to be scoped appropriately so make certain that the Tanium push settings include all the data you want to receive, on the correct schedule, for the data push into Nucleus. For example, should Workstations come in at midnight ET every night? You will need to work with your internal Tanium team to make sure the schedule works for them. ## Connector setup ### Connector Setup Checklist Follow the steps in this checklist to successfully setup this connector: 1. **API Access** Create an API key in Nucleus. 2. **Tanium Report Setup** Create the Nucleus Tanium report in the Tanium Asset module. 3. **Tanium Connect Configuration** Create a connection to push the data to Nucleus. Set the five configurations required for the connection. ### 1. API Access 1. Follow the [**Defining new roles**](https://help.nucleussec.com/docs/users-roles-and-permissions#defining-new-roles)****steps to create a new role. During creation, assign the role the permission **Import Scans Manually**. ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image%28329%29.png) 2. Generate a [**Service Account API Key**](https://help.nucleussec.com/docs/api-access#generating-a-service-account-api-key) for the Nucleus project that Tanium will upload data to. 3. Make a note of the API key for use later. ### 2. Tanium Report Setup 1. Log into your Tanium instance. 2. Navigate to **Modules> Asset > Reports.** ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image(391).png) 3. In the top right of the screen, select **Create Custom Report**. 4. Enter a **Name** and optional **Description******for the report, such as **Nucleus Asset Report** and **Asset data that is uploaded to Nucleus via Tanium Connect**. ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image(392).png) 5. In the section **Select Report Columns from Asset Tables**, select the fields that you want to appear in Nucleus. Note that the **Asset** fields **Asset ID**, **Compute Name** and **IP Address** are required. ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image(393).png) 6. Add an optional **Report Filter** to limit the assets that are returned. 7. Click **Submit**. ### 3. Tanium Connect Configuration Now that you have a report, we will set up a Tanium Connection to upload the report to Nucleus on a schedule: 1. Navigate to **Modules > Connect > Connections**. 2. In the top right of the screen, select **Create Connection.** 3. In the **General Information** section, enter a **Name** and optional **Description** for the connection, such as **Nucleus Asset Report Upload** and **Daily upload of asset report to Nucleus for asset creation and enrichment**. ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image(395).png) 4. In the **Configuration** section, set the **Source** to **Tanium Asset**, the **Type** to **Asset Report**, and **Available Reports** to the report we created in Step 2 above. > [!WARNING] > Important! > > Based on our testing, the Tanium Connect configuration **Batch Size** must be adjusted to under 200MB. **50,000 rows**should be the maximum value. ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image(396).png) 5. Set the **Destination** to **HTTP**. 6. If you have already setup the integration for Tanium Comply, select **Existing** and use the destination that you already setup, otherwise set the **Destination Name** to a unique name such as **Nucleus-ProdEnv-TaniumAPIOnlyUpload.** 7. Set the **URL******to `https://{nucleus_instance}/nucleus/api/projects/{project_id}/scans?file_in_body=true&scan_type=TANIUM` where `{nucleus_instance}`****is the base domain for your Nucleus instance, and `{project_id}`****is the project id of the project that you want Tanium to sync to. 8. Set the **Method** to **POST** and check the box **Trust on First Use**. 9. Set **Use Authentication** to **Header Authentication**, setting **Auth Header Name** to **x-apikey** and **Secret** to the API key that you generated in Step 1 above. ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image(397).png) 10. Next we will configure the output. In the **Configure Output** section, set the **Format** to **CSV** and check both **Include Headers** and **Detect Dynamic Data Exchange (DDE)**. ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image(398).png) 11. Expand **Columns** and configure the **Destination Labels**. Set the following **required** fields: 1. `ci_item_id` to `tanium_asset_id` 2. `ci_item_computer_name` to `host_name` 3. `ci_item_ip_address` to `ip_address` ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image(399).png) 12. To include additional fields, simply add a `metadata:` string to the front of every field you want pushed into Nucleus for use as additional metadata. In our screenshot above for example, we edited the label for `ci_item_country` to `metadata:country`. In Nucleus, this will import on the asset with the additional metadata key `tanium.country` and the value will be the country associated with the asset. The screenshot below shows how the Tanium data appears in Nucleus: ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image(400).png) 13. In the **Schedule** section check **Enable Schedule** and set the **Frequency** to **One run per day, every day**. Set the **Time** to when you want the report to be uploaded to Nucleus. 14. Click **Save,******or **Save and Run** to immediately upload a report for processing. ![](https://cdn.document360.io/3888970a-6501-459e-acc9-c47b71c6d64c/Images/Documentation/image-1640267381024.png) ## Connector Behaviour ### Troubleshooting Tips 1. If you see that the job "Failed" in Tanium Connect, check to confirm the report or the Connect job is configured correctly on the Tanium side. 2. If the connection is not going through, check your outbound firewall rules for potential issues. 3. If the connection is not going through and the firewall rules are set to support the connection, check the proxy settings for Tanium Connect. Sometimes teams have the Connect module proxied, and the proxy is configured to block HTTPS traffic. 4. If the resulting job is "Finished", that means that Nucleus successfully received the file, started processing the data, and the Tanium Connect module ran successfully. However, this does NOT mean that the file is correct, so if you do not see the file in Nucleus within an hour of confirming the "Finished" message on the Connect job, check with your Nucleus support team to make sure that the headers are correct and that the file processed successfully. If you have any questions, please contact us through the [support center](https://nucleussec.atlassian.net/servicedesk/customer/portal/3).