Intune Alerts

Yes, Log Analytics is crucial for creating custom alerts in Azure Monitor, and its licensing depends on the amount of data processed. Additionally, you’ll need Azure AD Premium P1 or P2 for advanced audit logs and features like Hybrid Entra Join. Microsoft Intune is already included in Microsoft 365 E3/E5, so you're covered there. If you’re using Microsoft Sentinel, there might be extra costs for log analysis and security features.

As an alternative, you can use Microsoft Graph API + Power Automate to monitor specific events and send notifications without relying on Log Analytics. For example, you can track device enrollments and get email alerts. You can also check Endpoint Manager Reports or the Security & Compliance Center, but these require manual review and won’t provide real-time alerts.