Client and Endpoint Management

TMT10 Intune Reporting – Kusto FTW


2:45pm - 4:00pm

Level: Advanced

Jan Ketil Skanke

Security MVP, Enterprise Mobility MVP

COO and Principal Cloud Architect


Using the built in monitor and reports in Intune is sufficient for some, but as with all reporting solutions, what is fine for you is not fine for others.

The desire for Microsoft to build a flexible reporting solution where your Intune data is available is often an ask, however, its already there, hidden in plain sight, and no we did not mean the CSV export button.

Enabling the diagnostic settings is the first part of making sure you can utilize the power of KQL, building your own customized reports in the form of a workbook. Think of KQL as SQL queries, Log Analytics as your SQL DB, and workbooks as SQL SSRS, but far better in terms of visualizations, and easy to share with your coworkers, management etc. Better still, KQL reports can be shared with others, making this a community reporting solution!

Join in for a session filled with powerful KQL queries, tips on visualizations, guidance on obtaining custom data, and practical examples of where you can make your Intune reports shine. Taking it one step beyond just reporting, we will also show you how to use the same data to do more with automations in Azure.

You will learn:

  • How to get started using KQL
  • How to enhance your Intune reports with custom data
  • How to build reporting workbooks