Can you filter Endpoint Analytics to show which applications are causing poor Resource Performance?

M. Jeffrey 0 Reputation points
2026-08-20T11:40:51.3+00:00

There are a number of devices within our tenant whom sometimes show poor performance through User experience (through Endpoint Analytics). Usually it would be Startup Performance, or Resource Performance showing unusually high amounts of RAM/CPU usage spikes.

It is currently difficult to diagnose what specifically causes this high increase in CPU/RAM usage, and looking online sadly only gives me generic pages regarding Endpoint Analytics and what it can do.

Is it possible to filter Endpoint Analytics in such a way, that when RAM/CPU usage has a poor score in Resource Performance, to search for which app the user is using that is causing this? Does the telemetry gather this data by default or only when additional data is being collected?

Do filters need to be added or adjusted to achieve this result, or is this seen elsewhere (e.g. Reports)?

Microsoft Security | Intune | Reporting
0 comments No comments

1 answer

Sort by: Most helpful
  1. Marcin Policht 106.8K Reputation points MVP Volunteer Moderator
    2026-08-20T13:02:44.3133333+00:00

    Unfortunately AFAIK, you won't be able to filter the Resource Performance report to see which specific application caused a resource spike. The standard Resource Performance metrics in Microsoft Intune Endpoint Analytics focus primarily on hardware metrics, such as machine models, CPU and RAM pressure, and upgrade insights.

    However, you can correlate this data with other native Intune features to identify the applications responsible for performance issues.

    Endpoint Analytics automatically collects core resource metrics and general application crash data when Windows Health Monitoring is enabled. You do not need to create additional data collection filters to identify problematic applications. Microsoft presents the hardware and application data in separate areas of Endpoint Analytics.

    To investigate applications causing resource issues, start with Reports > Endpoint analytics > Application reliability and check the App performance tab. The Total usage duration and App crash columns can help identify problematic applications. You can then compare crash times with the time of the resource spike.

    If you have Intune Advanced Analytics, the Anomalies dashboard can also help. It uses an analytical model to identify device regressions and can surface the specific application associated with a sudden decline in user performance.

    You can also use Device query on an affected device. This allows you to query the active Process table and see running processes along with their current CPU and memory usage. This is useful when you need to determine what is consuming resources on a specific device at the time you investigate it.


    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.