need to understnad the audit log....intune

Question

We received an audit log screenshot about the user device deleted from Intune...but s an admin when i log into the Intune admin center and check the logs ...it is missing.need help to investigate .

Please see the attached screenshot but inside the audot logs vcan't find those logs

Answer 1

In Tenant Admin, you can filter audit logs to see only admin activities. By default, audit logs displays every activity, including everything happening on backend which is not human initiated. By filtering logs and enlarging dates, it might help you to understand situation.

Answer 2

Hello administrator,

Unfortunately, Intune Audit log shows a deleted device if an IT administrator within the Intune portal deletes it. If a user removes the device from Intune on the client side, it is not logged.

If you find the answer above helpful, please Accept the answer to help anyone in the community who might have a similar question to quickly find the solution.