\documentclass[10pt,a4paper]{article}

% Packages
\usepackage{fancyhdr}           % For header and footer
\usepackage{multicol}           % Allows multicols in tables
\usepackage{tabularx}           % Intelligent column widths
\usepackage{tabulary}           % Used in header and footer
\usepackage{hhline}             % Border under tables
\usepackage{graphicx}           % For images
\usepackage{xcolor}             % For hex colours
%\usepackage[utf8x]{inputenc}    % For unicode character support
\usepackage[T1]{fontenc}        % Without this we get weird character replacements
\usepackage{colortbl}           % For coloured tables
\usepackage{setspace}           % For line height
\usepackage{lastpage}           % Needed for total page number
\usepackage{seqsplit}           % Splits long words.
%\usepackage{opensans}          % Can't make this work so far. Shame. Would be lovely.
\usepackage[normalem]{ulem}     % For underlining links
% Most of the following are not required for the majority
% of cheat sheets but are needed for some symbol support.
\usepackage{amsmath}            % Symbols
\usepackage{MnSymbol}           % Symbols
\usepackage{wasysym}            % Symbols
%\usepackage[english,german,french,spanish,italian]{babel}              % Languages

% Document Info
\author{ambassada}
\pdfinfo{
  /Title (sccm-client-log-files.pdf)
  /Creator (Cheatography)
  /Author (ambassada)
  /Subject (SCCM Client Log files Cheat Sheet)
}

% Lengths and widths
\addtolength{\textwidth}{6cm}
\addtolength{\textheight}{-1cm}
\addtolength{\hoffset}{-3cm}
\addtolength{\voffset}{-2cm}
\setlength{\tabcolsep}{0.2cm} % Space between columns
\setlength{\headsep}{-12pt} % Reduce space between header and content
\setlength{\headheight}{85pt} % If less, LaTeX automatically increases it
\renewcommand{\footrulewidth}{0pt} % Remove footer line
\renewcommand{\headrulewidth}{0pt} % Remove header line
\renewcommand{\seqinsert}{\ifmmode\allowbreak\else\-\fi} % Hyphens in seqsplit
% This two commands together give roughly
% the right line height in the tables
\renewcommand{\arraystretch}{1.3}
\onehalfspacing

% Commands
\newcommand{\SetRowColor}[1]{\noalign{\gdef\RowColorName{#1}}\rowcolor{\RowColorName}} % Shortcut for row colour
\newcommand{\mymulticolumn}[3]{\multicolumn{#1}{>{\columncolor{\RowColorName}}#2}{#3}} % For coloured multi-cols
\newcolumntype{x}[1]{>{\raggedright}p{#1}} % New column types for ragged-right paragraph columns
\newcommand{\tn}{\tabularnewline} % Required as custom column type in use

% Font and Colours
\definecolor{HeadBackground}{HTML}{333333}
\definecolor{FootBackground}{HTML}{666666}
\definecolor{TextColor}{HTML}{333333}
\definecolor{DarkBackground}{HTML}{A3A3A3}
\definecolor{LightBackground}{HTML}{F3F3F3}
\renewcommand{\familydefault}{\sfdefault}
\color{TextColor}

% Header and Footer
\pagestyle{fancy}
\fancyhead{} % Set header to blank
\fancyfoot{} % Set footer to blank
\fancyhead[L]{
\noindent
\begin{multicols}{3}
\begin{tabulary}{5.8cm}{C}
    \SetRowColor{DarkBackground}
    \vspace{-7pt}
    {\parbox{\dimexpr\textwidth-2\fboxsep\relax}{\noindent
        \hspace*{-6pt}\includegraphics[width=5.8cm]{/web/www.cheatography.com/public/images/cheatography_logo.pdf}}
    }
\end{tabulary}
\columnbreak
\begin{tabulary}{11cm}{L}
    \vspace{-2pt}\large{\bf{\textcolor{DarkBackground}{\textrm{SCCM Client Log files Cheat Sheet}}}} \\
    \normalsize{by \textcolor{DarkBackground}{ambassada} via \textcolor{DarkBackground}{\uline{cheatography.com/210059/cs/45272/}}}
\end{tabulary}
\end{multicols}}

\fancyfoot[L]{ \footnotesize
\noindent
\begin{multicols}{3}
\begin{tabulary}{5.8cm}{LL}
  \SetRowColor{FootBackground}
  \mymulticolumn{2}{p{5.377cm}}{\bf\textcolor{white}{Cheatographer}}  \\
  \vspace{-2pt}ambassada \\
  \uline{cheatography.com/ambassada} \\
  \end{tabulary}
\vfill
\columnbreak
\begin{tabulary}{5.8cm}{L}
  \SetRowColor{FootBackground}
  \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Cheat Sheet}}  \\
   \vspace{-2pt}Not Yet Published.\\
   Updated 16th December, 2024.\\
   Page {\thepage} of \pageref{LastPage}.
\end{tabulary}
\vfill
\columnbreak
\begin{tabulary}{5.8cm}{L}
  \SetRowColor{FootBackground}
  \mymulticolumn{1}{p{5.377cm}}{\bf\textcolor{white}{Sponsor}}  \\
  \SetRowColor{white}
  \vspace{-5pt}
  %\includegraphics[width=48px,height=48px]{dave.jpeg}
  Measure your website readability!\\
  www.readability-score.com
\end{tabulary}
\end{multicols}}




\begin{document}
\raggedright
\raggedcolumns

% Set font size to small. Switch to any value
% from this page to resize cheat sheet text:
% www.emerson.emory.edu/services/latex/latex_169.html
\footnotesize % Small font.


\begin{tabularx}{17.67cm}{x{7.2534 cm} x{10.0166 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Application management}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
\seqsplit{AppIntentEval.log} & Records details about the current and intended state of applications, their applicability, whether requirements were met, deployment types, and dependencies. \tn 
% Row Count 8 (+ 7)
% Row 2
\SetRowColor{LightBackground}
\seqsplit{AppDiscovery.log} & Records details about the discovery or detection of applications on client computers. \tn 
% Row Count 12 (+ 4)
% Row 3
\SetRowColor{white}
AppEnforce.log & Records details about enforcement actions (install and uninstall) taken for applications on the client. \tn 
% Row Count 17 (+ 5)
% Row 4
\SetRowColor{LightBackground}
\seqsplit{AppGroupHandler.log} & Records detection and enforcement information for application groups \tn 
% Row Count 20 (+ 3)
% Row 5
\SetRowColor{white}
\seqsplit{Ccmsdkprovider.log} & Records the activities of the application management SDK. \tn 
% Row Count 23 (+ 3)
% Row 6
\SetRowColor{LightBackground}
\seqsplit{SettingsAgent.log} & Enforcement of specific applications, records orchestration of application group evaluation, and details of co-management policies. \tn 
% Row Count 29 (+ 6)
% Row 7
\SetRowColor{white}
\seqsplit{SoftwareCenterSystemTasks}.log & Records activities related to Software Center prerequisite component validation. \tn 
% Row Count 33 (+ 4)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{3.9721 cm} x{13.2979 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Packages and programs}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
\seqsplit{execmgr.log} & Records details about packages and task sequences that run. \tn 
% Row Count 4 (+ 2)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{5.0083 cm} x{12.2617 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Asset Intelligence}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
\seqsplit{AssetAdvisor}.log & Records the activities of Asset Intelligence inventory actions. \tn 
% Row Count 5 (+ 3)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{6.5626 cm} x{10.7074 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Client notification}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
\seqsplit{BgbHttpProxy.log} & Records the activities of the notification HTTP proxy as it relays the messages of clients using HTTP to and from the notification server. \tn 
% Row Count 7 (+ 6)
% Row 2
\SetRowColor{LightBackground}
\seqsplit{CcmNotificationAgent}.log & Records the activities of the notification agent, such as client-server communication and information about tasks received and dispatched to other client agents. \tn 
% Row Count 14 (+ 7)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{5.3537 cm} x{11.9163 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Compliance settings and company resource access}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
CIAgent.log & Records details about the process of remediation and compliance for compliance settings, software updates, and application management. \tn 
% Row Count 6 (+ 5)
% Row 2
\SetRowColor{LightBackground}
\seqsplit{CITaskManager}.log & Records information about configuration item task scheduling. \tn 
% Row Count 9 (+ 3)
% Row 3
\SetRowColor{white}
\seqsplit{DCMAgent.log} & Records high-level information about the evaluation, conflict reporting, and remediation of configuration items and applications. \tn 
% Row Count 14 (+ 5)
% Row 4
\SetRowColor{LightBackground}
\seqsplit{DCMReporting}.log & Records information about reporting policy platform results into state messages for configuration items. \tn 
% Row Count 18 (+ 4)
% Row 5
\SetRowColor{white}
\seqsplit{DcmWmiProvider}.log & Records information about reading configuration item synclets from WMI. \tn 
% Row Count 21 (+ 3)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{5.3537 cm} x{11.9163 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Discovery}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
\seqsplit{InventoryAgent}.log & Records activities of hardware inventory, software inventory, and heartbeat discovery actions on the client. \tn 
% Row Count 5 (+ 4)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{6.5626 cm} x{10.7074 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Endpoint analytics}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
\seqsplit{SensorWmiProvider}.log & Records the activity of the WMI provider for the endpoint analytics sensor. \tn 
% Row Count 5 (+ 4)
% Row 2
\SetRowColor{LightBackground}
\seqsplit{SensorEndpoint.log} & Records the execution of endpoint analytics policy and upload of client data to the site server. \tn 
% Row Count 9 (+ 4)
% Row 3
\SetRowColor{white}
\seqsplit{SensorManagedProvider}.log & Records the gathering and processing of events and information for endpoint analytics. \tn 
% Row Count 13 (+ 4)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{6.908 cm} x{10.362 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Endpoint Protection}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
\seqsplit{EndpointProtectionAgent}.log & Records details about the installation of the Endpoint Protection client and the application of antimalware policy to that client. \tn 
% Row Count 7 (+ 6)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{5.3537 cm} x{11.9163 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Metering}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
mtrmgr.log & Monitors all software metering processes. \tn 
% Row Count 3 (+ 2)
% Row 2
\SetRowColor{LightBackground}
\seqsplit{SWMTRReportGen}.log & Generates a use data report that is collected by the metering agent. This data is logged in Mtrmgr.log. \tn 
% Row Count 7 (+ 4)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{4.3175 cm} x{12.9525 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{OS deployment}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
CAS.log & Records details when distribution points are found for referenced content. \tn 
% Row Count 5 (+ 3)
% Row 2
\SetRowColor{LightBackground}
\seqsplit{ccmsetup.log} & Records ccmsetup tasks for client setup, client upgrade, and client removal. Can be used to troubleshoot client installation problems. \tn 
% Row Count 10 (+ 5)
% Row 3
\SetRowColor{white}
\seqsplit{Setupact.log} & Records details about Windows Sysprep and setup logs. \tn 
% Row Count 12 (+ 2)
% Row 4
\SetRowColor{LightBackground}
\seqsplit{Setupapi.log} & Records details about Windows Sysprep and setup logs. \tn 
% Row Count 14 (+ 2)
% Row 5
\SetRowColor{white}
\seqsplit{Setuperr.log} & Records details about Windows Sysprep and setup logs. \tn 
% Row Count 16 (+ 2)
% Row 6
\SetRowColor{LightBackground}
\seqsplit{smpisapi.log} & Records details about the client state capture and restore actions, and threshold information. \tn 
% Row Count 20 (+ 4)
% Row 7
\SetRowColor{white}
Smsts.log & Records task sequence activities. \tn 
% Row Count 22 (+ 2)
% Row 8
\SetRowColor{LightBackground}
\seqsplit{TSAgent.log} & Records the outcome of task sequence dependencies before starting a task sequence. \tn 
% Row Count 25 (+ 3)
% Row 9
\SetRowColor{white}
\seqsplit{loadstate.log} & Records details about the User State Migration Tool (USMT) and restoring user state data. \tn 
% Row Count 28 (+ 3)
% Row 10
\SetRowColor{LightBackground}
\seqsplit{scanstate.log} & Records details about the User State Migration Tool (USMT) and capturing user state data. \tn 
% Row Count 31 (+ 3)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{3.9721 cm} x{13.2979 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Power management}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
\seqsplit{pwrmgmt.log} & Records details about power management activities on the client computer, including monitoring and the enforcement of settings by the Power Management Client Agent. \tn 
% Row Count 8 (+ 6)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{6.5626 cm} x{10.7074 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Software updates}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
\seqsplit{AlternateHandler}.log & Records details when the client calls the Office click-to-run COM interface to download and install Microsoft 365 Apps for enterprise client updates. It's similar to use of WuaHandler when it calls the Windows Update Agent API to download and install Windows updates. \tn 
% Row Count 13 (+ 12)
% Row 2
\SetRowColor{LightBackground}
ccmperf.log & Records activities related to the maintenance and capture of data related to client performance counters. \tn 
% Row Count 18 (+ 5)
% Row 3
\SetRowColor{white}
\seqsplit{DeltaDownload.log} & Records information about the download of express updates and updates downloaded using Delivery Optimization. \tn 
% Row Count 23 (+ 5)
% Row 4
\SetRowColor{LightBackground}
\seqsplit{PolicyEvaluator}.log & Records details about the evaluation of policies on client computers, including policies from software updates. \tn 
% Row Count 28 (+ 5)
% Row 5
\SetRowColor{white}
\seqsplit{RebootCoordinator}.log & Records details about the coordination of system restarts on client computers after software update installations. \tn 
% Row Count 33 (+ 5)
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{6.5626 cm} x{10.7074 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Software updates (cont)}}  \tn
% Row 6
\SetRowColor{LightBackground}
ScanAgent.log & Records details about scan requests for software updates, the WSUS location, and related actions. \tn 
% Row Count 5 (+ 5)
% Row 7
\SetRowColor{white}
SdmAgent.log & Records details about the tracking of remediation and compliance. However, the software updates log file, Updateshandler.log, provides more informative details about installing the software updates that are required for compliance. This log file is shared with compliance settings. \tn 
% Row Count 17 (+ 12)
% Row 8
\SetRowColor{LightBackground}
\seqsplit{ServiceWindowManager}.log & Records details about the evaluation of maintenance windows. \tn 
% Row Count 20 (+ 3)
% Row 9
\SetRowColor{white}
\seqsplit{SmsWusHandler.log} & Records details about the scan process for the Inventory Tool for Microsoft Updates. \tn 
% Row Count 24 (+ 4)
% Row 10
\SetRowColor{LightBackground}
\seqsplit{StateMessage.log} & Records details about software update state messages that are created and sent to the management point. \tn 
% Row Count 29 (+ 5)
% Row 11
\SetRowColor{white}
\seqsplit{UpdatesDeployment}.log & Records details about deployments on the client, including software update activation, evaluation, and enforcement. Verbose logging shows additional information about the interaction with the client user interface. \tn 
% Row Count 38 (+ 9)
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{6.5626 cm} x{10.7074 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Software updates (cont)}}  \tn
% Row 12
\SetRowColor{LightBackground}
\seqsplit{UpdatesHandler.log} & Records details about software update compliance scanning and about the download and installation of software updates on the client. \tn 
% Row Count 6 (+ 6)
% Row 13
\SetRowColor{white}
\seqsplit{UpdatesStore.log} & Records details about compliance status for the software updates that were assessed during the compliance scan cycle. \tn 
% Row Count 11 (+ 5)
% Row 14
\SetRowColor{LightBackground}
WUAHandler.log & Records details about the Windows Update Agent on the client when it searches for software updates. \tn 
% Row Count 16 (+ 5)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{3.9721 cm} x{13.2979 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Windows servicing}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 2 (+ 2)
% Row 1
\SetRowColor{white}
CBS.log & Records servicing failures related to changes for Windows Updates or roles and features. \tn 
% Row Count 5 (+ 3)
% Row 2
\SetRowColor{LightBackground}
DISM.log & Records all actions using DISM. If necessary, DISM.log will point to CBS.log for more details. \tn 
% Row Count 9 (+ 4)
% Row 3
\SetRowColor{white}
\seqsplit{setupact.log} & Primary log file for most errors that occur during the Windows installation process. The log file is located in the \%windir\%\$Windows.\textasciitilde{}BT\textbackslash{}sources\textbackslash{}panther folder. \tn 
% Row Count 15 (+ 6)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}

\begin{tabularx}{17.67cm}{x{5.181 cm} x{12.089 cm} }
\SetRowColor{DarkBackground}
\mymulticolumn{2}{x{17.67cm}}{\bf\textcolor{white}{Windows Update Agent}}  \tn
% Row 0
\SetRowColor{LightBackground}
\{\{width=30\}\} & \{\{width=70\}\} \tn 
% Row Count 1 (+ 1)
% Row 1
\SetRowColor{white}
\seqsplit{WindowsUpdate}.log & Records details about when the Windows Update Agent connects to the WSUS server and retrieves the software updates for compliance assessment, and whether there are updates to the agent components. \tn 
% Row Count 8 (+ 7)
\hhline{>{\arrayrulecolor{DarkBackground}}--}
\end{tabularx}
\par\addvspace{1.3em}



\end{document}