Intune Security Baseline - Audit

Question

Hello,

where can we review reports if Security baseline is configured in Intune? For instance, I enabled this one for audit:
https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-mdm-all?pivots=mdm-december-2020#audit

Everything is applied successfully on my machine when I check status but where are the logs or reports?
Do we have to configure Log Analytics workspace in order to query these events?

Thanks

Answer 1

If you think about Security Baseline as a whole, the status messages of single setting behind the device account should be enough. Security Baseline configures lot of different feature, if you want to go deep with single feature and track it down, that's another story.

Answer 2

That will depend on what are you looking to extract from the reports. There is a baseline report available, but it will give you pretty much the same compliance data that you shared the screenshot for.

Answer 3

For example I would like to check these events remotely(if that is possible):

But, it seems that those events are created in Event log of the local computer and can be reviewed in Event Vewer? Am I right?