-
Notifications
You must be signed in to change notification settings - Fork 2
Keyboard Navigation
Gil Burns edited this page Dec 8, 2025
·
4 revisions
IntuneLogWatch supports full keyboard navigation, allowing you to efficiently analyze Intune logs without using a mouse. This guide covers all available keyboard shortcuts and navigation controls.
| Shortcut | Action |
|---|---|
| ⌘O | Open Log File |
| ⌘R | Reload Local Logs |
| ⌘F | Search Policies |
| ↑/↓ | Navigate lists |
| → | Move to next pane |
| ← | Move to previous pane |
| Enter/Return | View policy log details |
| ⌘[ ⌘] | Navigate log entries (in log detail sheet) |
| ⌘C | Copy message field (in log detail sheet) |
| ⌃C | Copy raw log line (in log detail sheet) |
| Esc | Close log detail sheet |
| ⌘1 | All Events |
| ⌘2 | Sync Events |
| ⌘3 | Recurring Events |
- ⌘O - Open a new Intune log file
- ⌘R - Reload logs from the local system
IntuneLogWatch has three main areas you can navigate between:
- ↑/↓ Arrow Keys - Browse through sync events
- → Right Arrow - Move to the policy list for the selected sync event
- ↑/↓ Arrow Keys - Browse through policies in the selected sync event
- ← Left Arrow - Return to the sync events list
- Enter - View detailed log entries for the selected policy (when available)
- ⌘F - Jump to the search field from anywhere in the app
- Type to filter policies by name, ID, or bundle identifier
- ↑/↓ - Navigate through filtered results
When viewing detailed log entries for a policy:
- ⌘[ / ⌘] - Navigate between individual log entries
- ⌘C - Copy the message field of the current log entry
- ⌃C - Copy the raw log line of the current log entry
- Esc - Close the detail view and return to the policy list
- Use ↑/↓ to select a sync event in the sidebar
- Press → to move to the policy list
- Use ↑/↓ to browse policies
- Press Enter on any policy to view its detailed logs
- Press ⌘F to activate search
- Type the app name, policy ID, or bundle identifier
- Use ↑/↓ to navigate through search results
- Press Enter to view details of the selected policy
- Select a policy and press Enter to open detailed logs
- Use ⌘← / ⌘→ to navigate between different log entries
- Use ⌘C to copy the message text or ⌃C to copy the raw log line
- Press Esc to close the detail view when finished
- Press ⌘O to open a new log file
- Press ⌘R to refresh with the latest local logs
- When you open a log file, the first sync event is automatically selected
- When you move to the policy list, the first policy is automatically selected
- This saves you clicks and gets you analyzing faster
- Search works across policy names, IDs, and bundle identifiers
- Results update as you type
- Search is case-insensitive for easier use
- The app clearly shows which area has keyboard focus
- Blue highlighting indicates the active selection
- Focus moves logically between related interface areas
- Start with ⌘F - Jump straight to search when looking for specific policies
- Use arrow keys liberally - They work in all lists and are faster than scrolling
- Press Enter often - View detailed logs for any policy that shows issues
- Filter the Event list - Use ⌘1 through ⌘3 to select the choices in the event type picker
- Navigate with ←/→ - Quickly move between sync events and their policies
- Use ⌘← / ⌘→ in detail views - Browse through multiple log entries without closing the view
- Copy what you need - Use ⌘C for readable messages or ⌃C for complete raw log data
- Remember Esc - Quick way to close detail views and return to your analysis
- Combine shortcuts - Use ⌘R then arrow keys to quickly analyze fresh logs
Full keyboard navigation requires macOS 14.0 or later. On older versions of macOS, basic navigation is still available but some advanced features may be limited.