search

okieselbach / Intune

Intune Scripts and Helpers.
463 stars 187 forks source link

GetDecryptionInfoFromLogFile.ps1 only searches current IME log #22

Open SMSAgentSoftware opened 10 months ago

SMSAgentSoftware commented 10 months ago

The script only searches the current (latest) IME log - sometimes the download info may have aged out of the current log into a rolled over log.

The code updates below will search all IME logs:

function ExtractIntuneAppDetailsFromLogFile()
{
    $IMELogs = Get-ChildItem -Path $env:ProgramData\Microsoft\IntuneManagementExtension\Logs -Filter IntuneManagementExtension*.log -Recurse -ErrorAction SilentlyContinue
    foreach ($IMELog in $IMELogs)
    {
        $agentLogPath = $IMELog.FullName
        $stringToSearch = "<![LOG[Response from Intune = {".ToLower()

        Get-Content $agentLogPath | ForEach-Object {
        ...