Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Configure processes metrics

Configure the top processes by CPU and top processes by memory metrics for Microsoft Endpoint Configuration Manager for Investigation.

Before you begin

Role required: sn_cimaf.sn_cimaf_admin

Procedure

  1. Open the Microsoft Endpoint Configuration Manager.

  2. Create a MECM script with the name GetProcess.

    For more information, see Create a script in Microsoft Endpoint Configuration Manager.

  3. Provide the following code in the script block.

    Param(
    [Parameter(Mandatory=$True)]
    [string]$orderBy,
    [Parameter(Mandatory=$True)]
    [string]$top
    )
    
    $processes = get-process
    
    $Total = 0;
    ForEach ($process in $processes) {
        $Total += $process.cpu;
    }
    
    $processes | Sort-Object $orderBy -Descending | select processname,id,ws,cpu -First $top | select processname,id, @{l="mem"; e={$_.ws}}, @{l="cpu"; e={($_.cpu / $Total) * 100}};
    
  4. Retrieve and copy the script GUID.

  5. Open the MECM Adapter Configuration [sn_mecm_adapter_config] table.

    The MECM Adapter Configuration table displays the list of adapter configurations.

  6. From the list of configurations, select and edit Running processes - CPU%.

  7. In the Action input field, add the script GUID.

Image omitted: edit-cpu-config.png
Edit running processes CPU
  1. Click Save.

  2. From the list of configurations, select and edit Running processes - MEM.

  3. In the Action input field, add the script GUID.

  4. Click Save.

Result

The top processes by CPU and top processes by memory metrics are displayed on the Investigation tab of the incident record in Service Operations Workspace.

Parent Topic:Configuring CI metrics for Microsoft Endpoint Configuration Manager for Investigation