Health Checks

1. At the bottom-left corner of the Tenable Identity Exposure page, hover over the icon to see the global status of your infrastructure.

2. Click on the icon to open the Health Check page. Under the Domain Status or the Platform Status tab, you see either one of the following:

   • A message that all health checks passed

   • A list of warnings or issues with specific statuses:

     	The check succeeded and shows a normal result.
     	The check failed and identifies an issue.
     	The check failed but the issue does not prevent Tenable Identity Exposure from working correctly. For example, the check for data collection will result in failure due to a misconfiguration of the Active Directory on the client end if the service account cannot collect privileged data. However, it is not a serious issue because you haven't activated the Privileged Analysis feature on this domain in Tenable Identity Exposure, hence the warning. But if you activate Privileged Analysis, the check will immediately fail.
     	The check shows an unknown result because a dependent check failed. For example, the check for network reachability cannot proceed if the check for authentication failed.

• Above the list of health checks on the right, click the toggle Show successful checks to enabled to list all the checks that Tenable Identity Exposure performed with the following information:

  • Health check name

  • Status (pass, fail, fail but non-blocking, or unknown)

  • Impacted domain and its associated forest (for domain status checks only)

  • Time of the last check performed

  • How long the check has remained in this status

• Although it performs health checks on a regular basis, Tenable Identity Exposure does not update the page with the results in real time. Click on to refresh the list of results.

1. Above the list of health checks on the right, click on n/n health checks or n/n domains (for domain status only).

   The Health Checks or Forests and Domains pane opens.

2. Select the health check types or forests/domains (if applicable) and click on Filter on selection.

1. In the list of health checks, click on a health check name or the blue arrow () at the end of the line.

   The Details pane opens and shows a description of the check and a list of relevant details. For more information, see List of Health Checks below.

2. Click the arrow at the end of the detail line to expand it and show more information about the result.

By default, Tenable Identity Exposure shows the health check status icon at the bottom-left corner of the screen.

1. In Tenable Identity Exposure, go to System in the left navigation bar and select the Configuration tab.

   Alternatively, you can click on at the top-right corner of the Health Check page and select Configuration.

2. Under Application Services, select Health Check.

3. Click the toggle Show the Global Health Check Status to disabled.

   Tenable Identity Exposure hides the health check icon at the bottom-left corner of the screen.

1. In Tenable Identity Exposure, go to Accounts in the left navigation bar and select the Roles Management tab.

2. In the list of roles, select the user role and click on at the end of the line.

   The Edit a role pane opens.

3. Select the System configuration entities tab.

4. Select the Health Check entity and click the permission toggle from Unauthorized to Granted.

5. Click Apply and close.

For more information about permissions, see Set Permissions for a Role.

1. In Tenable Identity Exposure, go to System in the left navigation bar and select the Configuration tab.

   Alternatively, you can click on at the top-right corner of the Health Check page and select Alerts.

2. Under Alerting Engine, select Syslog or Email.

3. Click Add a Syslog alert or Add an email alert.

   A new pane opens. For the complete procedure, see Alerts.

4. Under Alert Parameters, in the Trigger the Alert box, select On health check status change from the drop-down menu.

5. Click the arrow in the Health Checks box to select the health check type to trigger an alert, and click Filter on selection.

6. Click Add.