← cd ~/events
// events/10010 · Intune connector
Event ID 10010Connector service started
The Intune Certificate Connector service started.
| Log | Microsoft Intune Connector |
|---|---|
| Source | Microsoft Intune Connector |
| Area | Intune connector |
What to check
Informational.
Find it with PowerShell
Run on the machine that logs it.
Get-WinEvent -FilterHashtable @{ LogName = 'Microsoft Intune Connector'; Id = 10010 } -MaxEvents 50 |
Format-List TimeCreated, Id, MessageHunt for it in Sentinel or Log Analytics
This works once a data collection rule sends the Microsoft Intune Connector log to your workspace, where it lands in the Event table.
Event
| where TimeGenerated > ago(7d)
| where EventLog == "Microsoft Intune Connector" and EventID == 10010
| project TimeGenerated, Computer, Source, RenderedDescription
| order by TimeGenerated descRelated Intune connector events
- Event ID 10020: Connector service stopped
- Event ID 10100: Connector certificate renewed
- Event ID 10102: Connector certificate renewal failed
- Event ID 10301: Retrieve certificate warning
- Event ID 10302: Retrieve certificate error
- Event ID 20100: PKCS certificate issued
- Event ID 20102: PKCS certificate issue failed
- Event ID 20202: Certificate revocation failed