Module 1 — Lesson 4 of 8

Health Scores

Understand how Performance Health Scores are calculated, what each score range means, and how to use scores for decision-making.
📚 Overview
🔧 Deep Dive
🛠 Hands-On
Check
🏆
5
Score Dimensions
🔢
0-10
Score Range
25%
Boot Time Weight
📅
14+
Days to Baseline

Health Score Composition -- Weighted Components

7.8 Health Score CPU Health 20% weight Memory Health 20% weight Disk Health 20% weight Boot/Login Time 25% weight App Stability 15% weight Boot/Login Time gets the highest weight -- it's the most employee-visible metric

A Performance Health Score is a composite number (0-10) assigned to each endpoint, combining CPU, memory, disk, boot time, and app stability into one rating. Think of it like a credit score for a computer -- higher is healthier.

Health scores enable prioritization (find the worst machines fast), trend tracking (is the fleet improving?), stakeholder communication ("your department averages 6.2, down from 7.8"), and data-driven hardware refresh decisions.

Score Ranges at a Glance

8.0-10.0
Excellent -- No action needed
👍
6.0-7.9
Good -- Monitor for trends
4.0-5.9
Fair -- Investigate & plan
🚨
0.0-3.9
Poor -- Immediate action

Simulated Health Score Dashboard

Tanium Console -- Health Score Overview
8.0
CPU Health
7.5
Memory Health
9.0
Disk Health
6.0
Boot Time
9.5
App Stability
Composite Score: 7.8 Good
(8.0 x 0.20) + (7.5 x 0.20) + (9.0 x 0.20) + (6.0 x 0.25) + (9.5 x 0.15) = 7.825

How Composite Scores Are Calculated

Each endpoint receives a sub-score (0-10) in five dimensions. The composite score is a weighted sum:

Health Score = (CPU x 0.20) + (Memory x 0.20) + (Disk x 0.20) + (Boot x 0.25) + (Stability x 0.15)
DimensionWeightWhat Drives ItHigh Score Means
CPU Health20%Avg utilization, peak frequency, sustained high useRarely exceeds 50% CPU
Memory Health20%Memory pressure %, page file use, near-exhaustion eventsAmple free RAM available
Disk Health20%I/O queue length, throughput, free spaceSSD with ample free space
Boot/Login Time25%Total boot duration vs. baselineBoots under 2 minutes
App Stability15%Crashes and hangs per dayZero or rare crash events
Weights Are Configurable

The percentages above are defaults. Mercury Insurance can adjust weights based on priorities -- e.g., increase boot time weight to 30% if that is the biggest employee complaint. Changing weights recalculates all historical scores retroactively.

Score Ranges in Detail

Baselining Your Environment

Day-one scores are not yet meaningful for decisions. Health scores gain power from context and comparison -- you need baseline data first.

Week 1: Daily Patterns

Capture how endpoints behave at 9 AM (heavy login) vs. 2 PM (steady work) vs. 11 PM (idle).

Week 2: Weekly Patterns

Identify recurring weekly peaks (e.g., Claims processing heaviest on Mondays).

Collect Boot Events

Endpoints aren't rebooted daily. Need 2+ weeks for 2-4 reboot data points per machine.

Scores Stabilize

After 14+ days, transient outliers are filtered and scores become reliable for trending and decisions.

Pro Tip: Communicate to Stakeholders

During the first two weeks, treat data as informational only. Do not make hardware refresh decisions or escalate to leadership until you have 14+ days of baseline. Communicate this upfront so early fluctuations don't erode confidence in the tool.

Comparative Analysis

Tanium Console -- Score Comparison

Average Health Scores by Department

IT Dept
8.2
Underwriting
7.1
Customer Svc
6.8
Claims
5.4

Trend Analysis (Claims Dept -- 90 days)

PeriodAvg ScoreChangeKey Factor
Jan 1 - Jan 316.8--Baseline period
Feb 1 - Feb 286.1-0.7Windows update impact
Mar 1 - Mar 155.4-0.7Disk space + aging HDD

Using Scores for Hardware Refresh

Move from age-based replacement ("every 4 years") to performance-based refresh:

Identify Persistently Poor

Filter for endpoints with 30-day average below 4.0.

Try Software Remediation

Some poor scores are fixable: runaway processes, full disks, misconfigured startups.

Flag Hardware Limitations

Machines still poor after remediation have genuine hardware limits: old HDD, insufficient RAM, weak CPU.

Prioritize by Impact

Cross-reference with department criticality. A poor-scoring claims adjuster machine has more business impact than a conference room PC.

Present to Leadership

"148 endpoints averaged below 4.0 for 90 days. Here's the department breakdown and productivity impact."

Key Insight

Health scores transform the refresh conversation from "we replace machines every 4 years" to "we replace when objective data shows they can't deliver acceptable experience." Some machines last 5 years; others need replacement after 3.

Score Calculation Walkthrough

Given these sub-scores, calculate the composite health score and determine the category.

Score Calculator -- Endpoint CAEI445521
DimensionSub-ScoreWeightContribution
CPU Health6.00.201.20
Memory Health4.00.200.80
Disk Health3.00.200.60
Boot/Login Time5.00.251.25
App Stability8.00.151.20
Composite Health Score 5.05
Category: Fair -- Investigate and plan remediation. Disk and memory are dragging down the score.

🤔 What Would You Do?

An endpoint has a 30-day average health score of 3.5. Investigation reveals: disk is 95% full (HDD, not SSD), memory pressure at 88%, and boot time of 7 minutes. You clear 15 GB of temp files, but the score only improves to 4.1 because the HDD is the fundamental bottleneck.

What is the appropriate next step?

Correct! Software remediation helped slightly, but the aging HDD is the fundamental limitation. This endpoint is a strong candidate for hardware refresh -- ideally an SSD upgrade or full machine replacement.
Not quite. When software remediation only provides marginal improvement and hardware (aging HDD) is identified as the root cause, the endpoint should be flagged for hardware refresh.

Match the Score to Its Category and Action

Drag each score on the left to the correct response on the right.

Score: 9.2
Score: 6.8
Score: 4.5
Score: 2.1
Poor -- Immediate action required
Excellent -- No action needed
Fair -- Investigate and plan remediation
Good -- Monitor for trends
All matches correct! You can confidently interpret health score ranges.
Some matches are incorrect. Remember: Excellent (8-10), Good (6-7.9), Fair (4-5.9), Poor (0-3.9).

Progress Checkpoint -- Lessons 1 through 4

You have completed the foundational lessons of Module 1. Test your understanding with this checkpoint quiz covering key concepts from all four lessons.

✍ Checkpoint Quiz: Lessons 1-4

1. Which Tanium architecture feature enables real-time data collection across hundreds of thousands of endpoints?

Correct! Tanium's linear chain architecture is the foundation that enables real-time visibility. (Lesson 1)
Review Lesson 1. Tanium uses linear chain peer-to-peer communication, where endpoints relay queries to each other, enabling answers in seconds across the entire fleet.

2. What is the recommended minimum data collection period before using health scores for decision-making?

Correct! Two weeks of data captures daily patterns, weekly patterns, and enough reboot events to establish reliable baselines. (Lesson 4)
Review Lesson 4, Baselining section. You need at least 2 weeks to capture daily and weekly patterns and establish reliable baselines before using scores for decisions.

3. The Performance CX is deployed to endpoints by:

Correct! The Tanium Client already installed on endpoints handles CX deployment automatically when you target computer groups. (Lesson 2)
Review Lesson 2. The Performance CX is automatically deployed through the existing Tanium Client to whichever computer groups you target -- no manual installation needed.

4. Which performance dimension typically receives the highest default weight in the health score calculation, and why?

Correct! Boot/Login Time gets the highest default weight (~25%) because every employee experiences it at least once daily and it strongly influences IT satisfaction perception. (Lesson 4)
Review the Score Weighting section in Lesson 4. Boot/Login Time receives the highest default weight (~25%) because it is the single most visible performance metric -- experienced by every employee, every day.

5. An endpoint has a 30-day average health score of 3.5. After investigating, you find the low score is caused by a nearly full hard drive (95% used) and an outdated HDD. What category does this score fall into, and what is the recommended action?

Correct! A score of 3.5 is in the Poor range (0-3.9). The right approach is to first try software remediation (clearing disk space), and if the aging HDD is the fundamental bottleneck, escalate for hardware replacement. (Lessons 3 & 4)
Review Lesson 4 score ranges and the hardware refresh section. A score of 3.5 falls in the Poor range. Best practice is to attempt software remediation first (free disk space), then flag for hardware replacement if the HDD is the fundamental limitation.

Congratulations on completing the first four lessons! You now have a solid foundation in Tanium Performance concepts.

Module 1 Foundations Complete
Mercury Insurance — Digital Workplace Team
DEX Specialization Training © 2026