Query Details
Intune Enrollment Failuresby Enrollment Type
Query
//Enrollment Failures by Enrollment Type IntuneOperationalLogs | where OperationName == "Enrollment" | where Result == "Fail" | extend myJson=todynamic(Properties) | extend EnrollmentType = tostring(myJson ["EnrollmentType"]) | summarize OperationCount=count() by EnrollmentType | sort by OperationCount desc
Explanation
This query is looking at the Intune operational logs and filtering for enrollment operations that have failed. It then converts the properties to a dynamic type and extracts the enrollment type. The query then summarizes the count of failed enrollment operations by enrollment type and sorts the results in descending order based on the count.
Details
Rod Trent
Released: July 10, 2020
Tables
IntuneOperationalLogs
Keywords
Enrollment,Fail,EnrollmentType,OperationCount
Operators
|,where,==,==,extend,todynamic,extend,tostring,[EnrollmentType],summarize,count(),by,sort,desc