Home
A macOS application for analyzing Microsoft Intune logs with human-readable insights
IntuneLogWatch is a specialized macOS tool designed for IT administrators to analyze Microsoft Intune macOS logs. It transforms complex log files into an easy-to-understand interface, making it simple to track policy deployments, troubleshoot sync issues, and understand device management activities.
- Left Pane: Sync events with status indicators and timing
- Center Pane: Policies executed during each sync
- Right Pane: Detailed log entries and timeline view
- Automatically correlates events by Policy ID (GUID)
- Shows Started/Completed/Duration
- Click the clipboard icon to copy the GUID to search in the Intune console
Visual indicators for quick identification:
- App Type: PKG or DMG installations
- Script Type: SCRIPT or ATTR
- Intent: Required, Available, or Uninstall
- Context: Root or User execution for scripts
- Displays actual app icons for installed applications
- Automatically retrieves icons from the system
- Fallback icons for system policies and scripts
- Installation & Setup - System requirements, download options, and installation process
- Interface Guide - Understanding the three-pane layout and navigation
- Features & Analysis - Advanced features, comparison tools, and export options
- Keyboard Navigation - Power users can navigate most of the interface without mouse clicks
- Clip Library - Allows you to save, organize, and manage important policy execution events
- All Logs View - Provides a comprehensive, unified view of every log entry
- Troubleshooting - Common issues and solutions
- CLI Tool Guide - Command-line interface documentation
- Local Processing: All analysis happens on your device
- No Cloud Upload: Logs never leave your machine
- Read-Only Access: App only reads existing log files
- Secure Storage: No sensitive data is permanently stored
- Always sanitize logs before sharing
- Remove sensitive URLs, usernames, or internal server names
- Use IntuneLogWatch's copy functions to extract specific entries only
- Download the latest release from GitHub Releases
- Install by dragging to Applications folder
- Launch IntuneLogWatch - it will automatically detect and load local Intune logs
- Explore the three-pane interface to analyze your device's sync activity
For detailed instructions, see Installation & Setup.
- Issues: Report bugs or request features on GitHub Issues
- Documentation: Browse this wiki for detailed guidance
- CLI Tool: See CLI Guide for command-line usage
IntuneLogWatch - Making Intune logs human-readable
