Intune log reader app?

[fireone]

Hello

The log file here:
C:\ProgramData\Microsoft\IntuneManagementExtension\Logs\IntuneManagementExtension.log

looks like it has a format. Is there a viewer app for this log type?

Thanks

David

[#2]

@fireone 

HI,

Cmtrace.exe 

Problemen met Win32-apps in Microsoft Intune oplossen | Microsoft Docs

[#3]

@Rudy_Ooms_MVPCMTrace is a component of SCCM which has nothing to do with Intune/MEM.

[#4]

One year later…. So cmtrace has nothing to do with having the option to read the intune mgt log? I guess you also think onetrace isnt ment to be used to read the intune mgt log ? :)

https://call4cloud.nl/2021/05/imecache-attack-of-the-cleaner/

may i ask what your method is to open and read the intune log?

[#5]

I also still use CMTrace for reading Microsoft logs because of the formatting, which makes it so much easier to read

[#6]

I'm asking for a method to read the logs. I pay tens of thousands of dollars per month for Intune licenses and autopilot. I do not use SCCM or CfgMgr. I see many Microsoft employees and reps telling us to use the log reader from completely separate tools like those (CMTrace or One Trace) that have their own licensing (using CMTrace without an SCCM license would be an unlicensed product).

Microsoft should provide a log reader for Intune only customers.

[#7]

Those tools are free to use AFAIK. And any text reader, notepad ++, work fine only cmtrace formats it nicely 

[#8]

Again… you dont need to pay to use those tools… they are freeeeeeee:) itsn that nice? Instead of complaining… maybe just download cmtrace and open a log?

its there so just use it?

Of course i can add jason sandys to this concersation? 

[#9]

CMTrace is not free, it requires SCCM, CfgMgr or System Centre licensing to use. Just because someone can copy the .exe into a zip file and host it on their own site for download does not make it free.

[#10]

Just wondering but can you show me the website in which is stated that you need to pay money to download and install the sccm TOOLKIT? the cmtrace was also offered on an official ms download link (until it was replaced with onetrace)

[#11]

@Rudy_Ooms_MVP 

Thanks Rudy for the original reply over a year ago. Cmtrace was indeed the solution, I should have replied back then,  sorry.

Re licensing,  it would be nice if MS explained it in simple terms somewhere. The closest thing i could find was this post below,  not from MS, that mentions that cmtrace can be used with intune due to a CAL being included with M365 license that you need for Intune, but not with all M365 licenses.

https://ccmexec.com/2018/12/copy-and-associate-cmtrace-using-intune-win32app-and-powershell/

[#12]

Wrote a blog post about using PowerShell for this :) https://powershellisfun.com/2022/09/12/read-intunemanagementextension-logs-using-powershell/ (And yes, I got the idea to do so from this post :D )

[#13]

I just released tool Get-IntuneManagementExtensionDiagnostics.ps1
which analyzes Intune Management Extension logs and also includes LogViewerUI which has everything formatted in clear text, includes search and filtering. Also found Timeline events are added to log view to help find right place/time in log.

And with option -ConvertAllKnownGuidsToClearText all known GUIDs are converted to App and Script names in LogViewerUI. This helps debugging a lot.

I use LogViewerUI usually with this command:
./Get-IntuneManagementExtensionDiagnostics.ps1 -Online -ShowLogViewerUI -ConvertAllKnownGuidsToClearText

Script can be downloaded from Powershell Gallery with command:
Save-Script Get-IntuneManagementExtensionDiagnostics -Path ./

And you can run it with different options:
./Get-IntuneManagementExtensionDiagnostics.ps1

# or to get Intune Powershell script names from Graph API
# use -Online parameter
./Get-IntuneManagementExtensionDiagnostics.ps1 -Online

Project web pages and more info/help can be found from GitHub page
https://github.com/petripaavola/Get-IntuneManagementExtensionDiagnostics

There are other options like cmtrace but my solution adds found events info to log viewer and can convert GUIDs to real names which helps a lot when debugging log file.