Technical Tip: Gather logs for debugging and troubleshooting Microsoft InTune Integration issues

[cmaheu]

Description

This article describes the steps necessary to collect logs for debugging issues with Microsoft InTune as requested by support. This process requires CLI access to the appliance. Contact support if assistance is required.

Scope

FortiNAC v8.x , v9.x, v7.x.

Solution

1. Log in to the appliance CLI.
   On a CentOS appliance, log in as root.
   On a FortiNAC-OS appliance, log in as admin.

2. Enable debugging. Use the commands provided by support or in the applicable integration reference manual in the Document Library. 
   
   Example.
   CentOS appliance:
   
   nacdebug –name MSInTuneServer true
   nacdebug –name MdmManager true
   

   FortiNAC-OS appliance:
   
   diagnose debug plugin enable –name MSInTuneServer true
   diagnose debug plugin enable –name MdmManager true

3. Reproduce the behavior.
   
   

4. Disable debugging.  

   Example.

   CentOS appliance:
   
   nacdebug –name MSInTuneServer false
   nacdebug –name MdmManager false
   

   FortiNAC-OS appliance:
   
   diagnose debug plugin disable MSInTuneServer
   diagnose debug plugin disable MdmManager

5. Collect the grab-log-snapshot log file. For instructions, see the following article: Technical Tip: How to get a debug log report from FortiNAC-CA or FortiNAC-Manager.

6. Attach the following information to the support ticket:
   

• The log file.
• The FortiNAC software version (x.x.x.x) is listed in the System Summary Dashboard widget and User drop-down menu.
• The steps used to reproduce the behavior.