A free, open-source log viewer and Windows troubleshooting tool. Drop in a log file and start reading — no install wizards, no prerequisites, no license keys.
Built as a modern replacement for Microsoft's CMTrace.exe with added Intune diagnostics, DSRegCmd analysis, and real-time log tailing.
Download the latest release for your platform and run it. That's it — single file, no dependencies.
Build status and nightly downloads are shown on the CMTrace Open build page.
| Platform | Download |
|---|---|
| Windows (x64) | .msi + NSIS .exe installers |
| macOS (Apple Silicon) | .dmg |
| Linux (x64) | .deb / .AppImage |
All releases are signed. The Windows executable is code-signed and the macOS app is notarized.
Startup update checks are disabled by default. Users can opt in from Settings > Updates. Managed Windows deployments can force-disable all app update checks with either installer:
CMTrace-Open_*_x64-setup.exe /S /DisableUpdateChecks
msiexec /i CMTrace-Open_<version>_x64.msi /qn DISABLEUPDATECHECKS=1The MSI option writes HKLM\Software\CMTrace Open\DisableUpdateChecks=1 and survives uninstall or upgrade until an administrator removes it. The NSIS switch writes the same value under the selected install registry hive. Existing user preferences cannot re-enable update checks on managed devices while this policy is present.
Note: You do not need Node.js, Rust, or any development tools to run CMTrace Open. Just download and run.
CMTrace Open ships as two standalone builds from the same source. Both are single-file executables with no installer or dependencies. The download page labels them "full edition" and "lite edition". Choose Full unless you specifically want the smallest possible download - it is the default build and includes everything.
The complete tool: the log viewer plus every specialized troubleshooting feature.
| Feature | What it does | Platform |
|---|---|---|
| Intune Diagnostics | IntuneManagementExtension (IME) log analysis, event timeline, and download statistics | All |
| DSRegCmd | Entra join, hybrid join, PRT, MDM, and Windows Hello for Business triage | Windows |
| Software Deployment | Scan a folder of app-install logs (MSI, PSADT, Burn, PatchMyPC) for exit codes and failures | Windows |
| Event Log Viewer | Open and query Windows Event Log (.evtx) files; enumerate live channels |
All (live channels: Windows) |
| Sysmon | Sysmon operational event log analysis | Windows |
| Secure Boot Certs | Secure Boot certificate-rotation analysis and remediation | All (live scan: Windows) |
| macOS Diagnostics | Intune, Defender, configuration profile, and package diagnostics | macOS |
| Diagnostic Collection | Gather logs, registry keys, and event logs into an evidence bundle | Windows |
The core log viewer only. It keeps everything under Log Viewer below - format auto-detection, real-time tailing, virtual scrolling, find and filter, text highlighting, and the embedded error-code database - plus the Timeline and DNS / DHCP tools. It leaves out the eight specialized features above, which also drops the Windows Event Log and property-list parsers and makes the binary noticeably smaller. Choose Lite if you just want a fast, portable, CMTrace-style log reader with a minimal footprint.
Both editions read the same log formats and share the same viewer, so a log you can open in Full opens identically in Lite.
- Auto-detection — automatically identifies CCM, CBS, DISM, Panther, simple, and plain text log formats
- Real-time tailing — live file watching with pause/resume
- Virtual scrolling — smooth performance with 100K+ line files
- Severity color coding — Errors (red), Warnings (yellow), Info (default)
- Find and Filter — Ctrl+F search with F3 navigation; filter by message, component, thread, or timestamp
- Text highlighting — configurable keyword highlighting
- Error code lookup — 120+ embedded Windows, SCCM, and Intune error codes
- Flexible input — open files, folders, drag and drop, or use built-in source presets
- File association — set as default
.logfile handler on Windows
Analyze Intune Management Extension logs without reading raw text line by line.
- Parse a single IME log or an entire
IntuneManagementExtension\Logsfolder - Color-coded event timeline for Win32 apps, WinGet apps, PowerShell scripts, remediations, ESP, and sync sessions
- Download statistics with size, speed, and Delivery Optimization percentage
- Summary dashboard with event counts, success/failure rates, and log time span
- Automatic GUID extraction for app and policy identifiers
- Issue clustering with suggested next steps
Triage Entra join, hybrid join, PRT, MDM, and Windows Hello for Business issues.
- Live capture, paste, text file, or evidence bundle input
- Join posture, failure stage, and capture confidence at a glance
- Issue cards with severity, evidence, and suggested fixes
- Registry-backed Windows Hello for Business policy correlation
- Export as JSON or summary for case handoff
See the DSRegCmd troubleshooting guide for a detailed walkthrough.
- Download the release for your platform from the Releases page
- Run the executable — no install required (or use the Windows MSI/NSIS installer)
- Open a log — drag and drop a file, use File > Open, or use a source preset
- Explore — use Find (Ctrl+F), Filter, or switch to the Intune/DSRegCmd workspace
| Format | Examples |
|---|---|
| CCM | <![LOG[...]LOG]!> — ConfigMgr client logs |
| CBS / DISM / Panther | CBS.log, dism.log, setupact.log, setuperr.log |
| Simple | $$< delimited — older SCCM-style logs |
| Plain text | Any .log or .txt file with or without timestamps |
Format detection is automatic. Open any log file and CMTrace Open will pick the right parser.
Visit the CMTrace Open Wiki for detailed guides:
- Getting Started — installation, first log, basic navigation
- Log Viewer Guide — find, filter, highlight, tailing
- Intune Workspace — IME log analysis and diagnostics
- DSRegCmd Workspace — device join and identity troubleshooting
- FAQ — common questions and answers
CMTrace Open welcomes contributions. See CONTRIBUTING.md for development setup, build commands, architecture overview, and coding guidelines.
CMTrace is a tool developed and distributed by Microsoft Corporation. CMTrace Open is an independent open-source project and is not affiliated with, endorsed by, or connected with Microsoft Corporation. See DISCLAIMER.md for full details.