error "Command HRESULT="-2147418113" when using "COMMAND" in On-Demand Diagnostics Logs

%3CLINGO-SUB%20id%3D%22lingo-sub-882604%22%20slang%3D%22en-US%22%3Eerror%20%22Command%20HRESULT%3D%22-2147418113%22%20when%20using%20%22COMMAND%22%20in%20On-Demand%20Diagnostics%20Logs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-882604%22%20slang%3D%22en-US%22%3E%3CP%3EOur%20Windows%201903%20endpoints%20are%20successfully%20uploading%20several%20registry%20keys%20and%20eventviever%20logs%20to%20Azure%20Blob%20storage.%3CBR%20%2F%3EBut%20some%20simple%20commands%20are%20failing%3A%3C%2FP%3E%3CP%3E%3CFONT%3ECommand%20HRESULT%3D%22-2147418113%22%20when%20using%20the%20command%20%3A%20C%3A%5CWindows%5CSystem32%5Cwbem%5Cwmic.exe%20bios%20get%20biosversion%3C%2FFONT%3E%3C%2FP%3E%3CDIV%3E%3CDIV%3E%3CFONT%3ESame%20error%20when%20using%20command%20%3A%20C%3A%5CWindows%5CSystem32%5CWindowsPowershell%5Cv1.0%5Cpowershell.exe%20-noprofile%20-command%20%22%26amp%3B%20get-content%20C%3A%5Cwindows%5Cinf%5Csetupapi.dev.log%20-Tail%20250%22.%3C%2FFONT%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%3E%3CFONT%3EI've%20paid%20special%20attention%20to%20special%20characters%20that%20need%20to%20be%20escaped%20in%20xml%20and%20made%20sure%20full%20paths%20are%20used.%3CBR%20%2F%3EDoes%20anyone%20have%20an%20idea%20how%20to%20troubleshoot%3F%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20command%20%22C%3A%5CWindows%5Csystem32%5Cipconfig.exe%20%2Fall%22%20is%20working%20fine%20%3A%3CBR%20%2F%3E%3C%2FFONT%3E%3C%2FDIV%3E%3CDIV%3E%3CFONT%3E%22%3CCOMMAND%20hresult%3D%22%26quot%3B0%26quot%3B%22%3EC%3A%5CWindows%5Csystem32%5Cipconfig.exe%20%2Fall%3C%2FCOMMAND%3E%22.%3C%2FFONT%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-882604%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1073766%22%20slang%3D%22en-US%22%3ERe%3A%20error%20%26amp%3Bquot%3BCommand%20HRESULT%3D%26amp%3Bquot%3B-2147418113%26amp%3Bquot%3B%20when%20using%20%26amp%3Bquot%3BCOMMAND%26amp%3Bquot%3B%20in%20On-Demand%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1073766%22%20slang%3D%22en-US%22%3E%3CP%3EMicrosoft%20updated%20the%26nbsp%3B%3CFONT%3EDiagnosticLog%20CSP%3C%2FFONT%3E%20documentation.%3CBR%20%2F%3EVersion%201.4%20of%20the%20documentation%20now%20clearly%20explains%20why%20some%20commands%20won't%20run%20for%20privacy%20reasons.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Our Windows 1903 endpoints are successfully uploading several registry keys and eventviever logs to Azure Blob storage.
But some simple commands are failing:

Command HRESULT="-2147418113" when using the command : C:\Windows\System32\wbem\wmic.exe bios get biosversion

Same error when using command : C:\Windows\System32\WindowsPowershell\v1.0\powershell.exe -noprofile -command "& get-content C:\windows\inf\setupapi.dev.log -Tail 250".
I've paid special attention to special characters that need to be escaped in xml and made sure full paths are used.
Does anyone have an idea how to troubleshoot?

The command "C:\Windows\system32\ipconfig.exe /all" is working fine :
"<Command HRESULT="0">C:\Windows\system32\ipconfig.exe /all</Command>".
1 Reply
Highlighted

Microsoft updated the DiagnosticLog CSP documentation.
Version 1.4 of the documentation now clearly explains why some commands won't run for privacy reasons.