Log to ETW
It would be handy if SCCM Agent (as well as the SCCM Server components) could send logs to ETW (instead or in addition to the files under C:\Windows\CCM\Logs) folder. That would allow us to redirect the events to a central location and analyze with event analysis tools, (i.e. OMS Log Analytics, Message Analyzer, etc.).
This is something that’s on our backlog.
Is there any further update on this? It would be great to have the local SCCM clients logs in a format that is readable by the Azure Log Analytics Agent.
would also love to see this! extremely time consuming troubleshooting deployments across my 20,000 clients when we need to review multiple files across thousands of client manually.