Tanium REST: Wait for results for long running sensors
Closed this issue · 1 comments
Name of the app
Tanium REST
Is your feature request related to a problem? Please describe.
When asking a Tanium question on a large network, it can take a long time for Tanium to determine that X% of hosts have returned results. However in some circumstances, the use case knows we only want the first N results, and we don't want to wait for all results to come in.
In a different scenario, the Tanium REST app might be configured to return results once 99% of hosts have returned responses. But for a specific use case, you may not want results returned, until N hosts have reported results, whether or not 99% of hosts have checked in.
Additionally, some Tanium sensors return the message "results currenlty unavailable" instead of the actual results, and then return the actual results at some later time. We want an option where the App can avoid returning to the playbook until the results have been retrieved.
Describe the solution you'd like
- Add a setting where a Tanium Request will return results as soon as N results are returned
- Add a setting where a Tanium Request will wait (until the Timeout setting number of seconds) until at least N results are returned
- Add a setting where a Tanium Request will wait to return results until all "results currently unavailable" results are filled in with actual results from sensors. Reference: https://docs.tanium.com/interact/interact/results.html#:~:text=Results%20Currently%20Unavailable
Describe alternatives you've considered
None.
Additional context
Will submit a Pull Request that adds this feature soon.
This issue has been addressed as part of this PR(#383). Hence, closing this issue.