Quick Access →Intune & Azure Blog Visit my Intune & Azure Store Back to Main Site

LogLens RCA · Diagnostic Engine

LogLens RCA Analyzer

Advanced offline Intune & Windows log analyzer. Upload a diagnostic log, get root cause + remediation in seconds — with optional AI-assisted diagnosis.

100% In-Browser · No Data Leaves Your Device260+ Error Rules · 10 Log Patterns

260

Error Rules

Event IDs

Symptom Rules

Data Leaves Browser

AI-Assisted Root Cause Diagnosis

Optional ZAI-powered summary, prioritized remediation steps, and preventive measures — fed only sanitized rule names and snippets.

Native .evtx Parsing

Drop a raw Windows Event log file and the analyzer extracts readable ASCII strings client-side — no PowerShell pre-processing required.

Run an Analysis

Drop a log file in the panel below. Pattern matching runs in your browser. AI diagnosis is opt-in and uses only sanitized snippets.

How to collect Intune diagnostics

Upload a diagnostic log to begin

Supported: MDM logs, Autopilot diagnostics, Windows Event logs (.evtx), exported CSVs. Analysis runs entirely in your browser.

Offline & private Results in seconds

AI-Assisted Diagnosis

Sends sanitized rule names + snippets only — never raw log content.

Rule Library · Logs Analyzer

260 Common Intune, Autopilot, Entra ID & Windows Troubleshooting Rules

Accepts an error code, error message, command output, or symptom and returns meaning → likely cause → checks → suggested fix → logs/commands → related errors. Event IDs (WDAC 3077, WFP 5157…) are kept distinct from error codes for accurate diagnosis. Included with the Premium Log Analyzer subscription — free sample rules below.

Error Code & Troubleshooting Rule Library

260 curated rules — 145 error codes, 22 event IDs, 79 symptom patterns, 14 special rules — meaning → likely causes → checks → fix → logs → related errors.

Paste an error code, error message, command, screenshot text, or symptom

Ctrl+Enter to analyze · nothing leaves your input except sanitized snippets

Log Pattern Rules

10 curated regex rules the log-file analyzer runs against uploaded Intune, Autopilot, BitLocker, Defender & MDM logs.

Autopilot Hardware Hash Invalid

critical

autopilot

Device hardware hash not registered or invalid in Autopilot.

HRESULT: 0x80180014hardware hashInvalidDeviceRecordDeviceNotFound

MDM Enrollment Failed (0x80180026)

critical

enrollment

Paste any error code, message, command output, or symptom — get meaning, likely causes, checks, fix steps, PowerShell commands, log paths and related errors.

Sanitized & Anonymized

Bearer tokens and long base64 strings are auto-redacted before any snippet is sent for AI diagnosis. Your logs never leave the browser.

Mobile Device Management enrollment failed.

0x80180026EnrollmentFailedMDM enrollmentDEVICE_ENROLLMENT_FAILED

Autopilot ESP Timeout (0x800705b4)

error

autopilot

The Enrollment Status Page timed out waiting for app/policy installation.

0x800705b4ESP timed outEnrollmentStatusPageTimeLeft = 0

Autopilot Network Connectivity Timeout

error

autopilot

Device could not reach required Autopilot endpoints during OOBE.

0x80072EE2WinInetnetwork timeoutinternet connection

Intune Policy Sync Failed

error

sync

Device failed to sync policies from Intune.

Sync failed0x87D13B62PolicyDownloadFailedMDM policy sync

Microsoft Defender ATP Issues

error

policy

Defender for Endpoint onboarding or health issue.

SenseDefenderATPonboarding failed0x809012C2

Win32 App Installation Failed

error

mdm

Win32 app deployment failed via Intune Management Extension.

0x87D13B62IntuneManagementExtensionAppInstallFailedWin32 app

BitLocker Recovery Key Prompted

warning

BitLocker

BitLocker triggered a recovery key prompt on boot.

BitLockerRecoveryKeyrecovery passwordFVEK

Conditional Access Blocked Sign-in

warning

policy

Conditional Access policy blocked the sign-in attempt.

53003ConditionalAccessblock accesssign-in blocked

Enrollment Restrictions Hit

warning

enrollment

User hit device enrollment cap or restriction policy.

0x80180026device limitenrollment restrictionDeviceCapReached

Subscription

LogLens Pro Suite plans

Recurring per-user subscription. Automatically renews until cancelled. Cancel anytime from your dashboard.

Basic

LogLens Pro Suite

Core diagnostics for one engineer — conflict checker, 80 runbooks and the PowerShell library.

$5/user/mo

Billed monthly · cancel anytime

Policy Conflict Checker — Intune & Azure conflicts
IT Troubleshooting — 80 guided runbooks
PowerShell Library — 60+ Intune & Azure snippets
260-rule error library (Analyze an Error + Browse Rules)
All future rule updates
Community support

Professional

LogLens Pro Suite

Advanced analytics — everything in Basic plus device comparison, batch triage and compliance packs.

$9/user/mo

Billed monthly · cancel anytime

Everything in Basic, plus:
Compare 4 Devices — side-by-side log matrix
NEW: Batch Log Triage — paste up to 60 errors at once
NEW: Compliance & Hardening Checklist generator
Priority rule updates (new rules first)
Email support

Full Suite

Enterprise

LogLens Pro Suite

Full suite — everything in Professional plus tenant health scoring, executive exports and priority support.

$15/user/mo

Billed monthly · cancel anytime

Everything in Professional, plus:
NEW: Tenant Health Score — 12-point audit + roadmap
NEW: Executive-ready compliance exports
Early access to every new premium tool
Priority 24/7 support
Team usage (per-seat licensing)

Prices per user, shown in your local currency · 35% off with annual billing · upgrade or cancel anytime from your dashboard.

Prices shown in your local currency35% off annual billingUpgrade or cancel anytime

LogLens RCA Analyzer

AI-Assisted Root Cause Diagnosis

Native .evtx Parsing

Run an Analysis

260 Common Intune, Autopilot, Entra ID & Windows Troubleshooting Rules

Error Code & Troubleshooting Rule Library

Log Pattern Rules

Autopilot Hardware Hash Invalid

MDM Enrollment Failed (0x80180026)

Error Rule Library

Sanitized & Anonymized

Autopilot ESP Timeout (0x800705b4)

Autopilot Network Connectivity Timeout

Intune Policy Sync Failed

Microsoft Defender ATP Issues

Win32 App Installation Failed

BitLocker Recovery Key Prompted

Conditional Access Blocked Sign-in

Enrollment Restrictions Hit

LogLens Pro Suite plans

Basic

Professional

Enterprise