Intune Enrollment Failuresby Enrollment Type
Query
//Enrollment Failures by Enrollment Type
IntuneOperationalLogs
| where OperationName == "Enrollment"
| where Result == "Fail"
| extend myJson=todynamic(Properties)
| extend EnrollmentType = tostring(myJson ["EnrollmentType"])
| summarize OperationCount=count() by EnrollmentType
| sort by OperationCount descExplanation
This query is looking at the Intune operational logs and filtering for enrollment operations that have failed. It then converts the properties to a dynamic type and extracts the enrollment type. The query then summarizes the count of failed enrollment operations by enrollment type and sorts the results in descending order based on the count.
Details
Rod Trent
Released: July 10, 2020
Tables
IntuneOperationalLogs
Keywords
EnrollmentFailEnrollmentTypeOperationCount
Operators
|where==extendtodynamictostring[EnrollmentType]summarizecount()bysortdesc