KQL Search

Query Details

HomeAI ToolsDevice Query

Operational Autopilot Duration

Query

// Show how long the Autopilot process took in seconds and minutes. Result also shows DeviceName for further troubleshooting if needed.
IntuneOperationalLogs
| extend DeviceId = tostring(todynamic(Properties).DeviceId)
| extend Time_Seconds = todynamic(Properties).TimeDiff
| extend Autopilot = todynamic(Properties).IsAutopilot
| extend Status = todynamic(Properties).Status
| extend Time_Minutes = Time_Seconds/60
| where Status == "Completed"
| where isnotempty(Autopilot)
| join kind=leftouter IntuneDevices on DeviceId 
| project ['Is Autopilot?'] = Autopilot, Status, DeviceName, Time_Minutes, Time_Seconds

Explanation

This query is used to determine the duration of the Autopilot process in both seconds and minutes. It also provides the name of the device for potential troubleshooting purposes. The query is specifically looking at completed Autopilot processes and excludes any records where the Autopilot status is empty. The results are then joined with the IntuneDevices data based on the DeviceId. The final output includes whether the device is Autopilot, the status, the device name, and the time taken in minutes and seconds.

Details

Ugur Koc profile picture

Ugur Koc

Released: August 7, 2022

Tables

IntuneOperationalLogsIntuneDevices

Keywords

IntuneOperationalLogs,DeviceId,Properties,TimeDiff,Autopilot,Status,Time_Seconds,Time_Minutes,Completed,IntuneDevices,DeviceName,IsAutopilot

Operators

extendtostringtodynamicwhereisnotemptyjoinkindproject

Actions