Forum Discussion
fireone
Apr 08, 2021Copper Contributor
Intune log reader app?
Hello
The log file here:
C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\IntuneManagementExtension.log
looks like it has a format. Is there a viewer app for this log type?
Thanks
David
- screampuffCopper Contributor
Rudy_Ooms_MVPCMTrace is a component of SCCM which has nothing to do with Intune/MEM.
One year later…. So cmtrace has nothing to do with having the option to read the intune mgt log? I guess you also think onetrace isnt ment to be used to read the intune mgt log ? 🙂
https://call4cloud.nl/2021/05/imecache-attack-of-the-cleaner/
may i ask what your method is to open and read the intune log?
- petripaavolaCopper ContributorI just released tool Get-IntuneManagementExtensionDiagnostics.ps1
which analyzes Intune Management Extension logs and also includes LogViewerUI which has everything formatted in clear text, includes search and filtering. Also found Timeline events are added to log view to help find right place/time in log.
And with option -ConvertAllKnownGuidsToClearText all known GUIDs are converted to App and Script names in LogViewerUI. This helps debugging a lot.
I use LogViewerUI usually with this command:
./Get-IntuneManagementExtensionDiagnostics.ps1 -Online -ShowLogViewerUI -ConvertAllKnownGuidsToClearText
Script can be downloaded from Powershell Gallery with command:
Save-Script Get-IntuneManagementExtensionDiagnostics -Path ./
And you can run it with different options:
./Get-IntuneManagementExtensionDiagnostics.ps1
# or to get Intune Powershell script names from Graph API
# use -Online parameter
./Get-IntuneManagementExtensionDiagnostics.ps1 -Online
Project web pages and more info/help can be found from GitHub page
https://github.com/petripaavola/Get-IntuneManagementExtensionDiagnostics
There are other options like cmtrace but my solution adds found events info to log viewer and can convert GUIDs to real names which helps a lot when debugging log file.