Update README.md

This commit is contained in:
Petri Paavola
2023-03-08 11:15:50 +02:00
committed by GitHub
parent a55976dba0
commit 33148b3363
+15 -5
View File
@@ -1,9 +1,11 @@
# Get-IntuneManagementExtensionDiagnostics # # Get-IntuneManagementExtensionDiagnostics #
This script **analyzes** Microsoft Intune Management Extension (IME) log(s) and creates timeline report from found events.
It also includes really capable **LogViewerUI** for manual Intune log(s) viewing.
Go to script [Get-IntuneManagementExtensionDiagnostics.ps1](./Get-IntuneManagementExtensionDiagnostics.ps1) Go to script [Get-IntuneManagementExtensionDiagnostics.ps1](./Get-IntuneManagementExtensionDiagnostics.ps1)
<img src="./pics/Get-IntuneManagementExtensionDiagnostics-Observed_Timeline.png" width=75% height=75%> <img src="./pics/Get-IntuneManagementExtensionDiagnostics-Observed_Timeline.png" width=50% height=50%><img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI01.png" width=50% height=50%>
This script **analyzes** Microsoft Intune Management Extension (IME) log(s) and creates timeline report from found actions.
Timeline report includes information about Intune events Timeline report includes information about Intune events
* **Win32App** * **Win32App**
@@ -57,14 +59,14 @@ Save-Script Get-IntuneManagementExtensionDiagnostics -Path ./
``` ```
### LogViewerUI - better than cmtrace.exe ?-) ### ### LogViewerUI - better than cmtrace.exe ?-) ###
<img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI01.png" width=75% height=75%> <img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI01.png" width=50% height=50%>
Script also includes really capable Log Viewer UI when script is started with parameter **-ShowLogViewerUI** Script also includes really capable Log Viewer UI when script is started with parameter **-ShowLogViewerUI**
``` ```
./Get-IntuneManagementExtensionDiagnostics.ps1 -Online -ShowLogViewerUI ./Get-IntuneManagementExtensionDiagnostics.ps1 -Online -ShowLogViewerUI
``` ```
LogViewerUI (Out-GridView) looks a lot like cmtrace.exe tool but it is better because all found Timeline events are added to log for easier debugging. LogViewerUI (Out-GridView) looks a lot like cmtrace.exe tool but it is better because all found Timeline events are added to log for easier debugging.
LogViewerUI has good search and filtering capabilities. Try to filter known log entries in Timeline: LogViewerUI has good search and filtering capabilities. Try to filter known log entries in Timeline:
**Add criteria -> ProcessRunTime -> is not empty** **Add criteria -> ProcessRunTime -> is not empty**
@@ -72,5 +74,13 @@ Selecting last line (RELOAD) and OK will reload log file.
Script can merge multiple log files so especially in LogViewerUI you can see Powershell command outputs from AgentExecutor.log Script can merge multiple log files so especially in LogViewerUI you can see Powershell command outputs from AgentExecutor.log
Check [screenshots](https://github.com/petripaavola/Get-IntuneManagementExtensionDiagnostics/tree/main/pics)
<img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI01.png" width=200><img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI02-FilterKnownEvents.png" width=200><img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI03-FilterKnownEvents.png" width=200><img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI04.png" width=200>
<img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI05-FilterKnownEvents.png" width=200><img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI06-ClearFilterKnownEvents.png" width=200><img src="./pics/Get-IntuneManagementExtensionDiagnostics-LogViewerUI07-FastSearch.png" width=200>
### Backlog: ### ### Backlog: ###
There are many features in development and planned in future. Stay tuned :) There are many features in development and planned in future. Stay tuned :)
### Known issues: ###
* WinGetApp install may be detected falsepositive wrong. There is WinGet App install fail and empty App name and UserName in Timeline view.
* Status: working on this issue