How to Read Windows Update Logs in Windows 10


Starting with Windows 10 build 9926, Windows Update logs are no longer saved to "%windir%\Windowsupdate.log".

Windows Update client now uses Event Tracing for Windows (ETW) to generate diagnostic logs saved as .etl files in the "%windir%\Logs\WindowsUpdate" folder. This method improves performance and reduces disk space usage. However, the logs are not immediately readable as written.

Reference:

• Windows Update log files | Microsoft Docs
• SetupDiag | Microsoft Docs
• Windows 10, WindowsUpdate.log and how to view it with PowerShell or Tracefmt.exe | Microsoft Docs

This tutorial will show you how to read the Windows Update logs for your Windows 10 PC.

Contents

• Option One: To read Windows Update Client logs using BAT file
• Option Two: To read Windows Update logs using PowerShell
• Option Three: To read Windows Update event logs in Event Viewer

OPTION ONE

To read Windows Update logs using PowerShell

Special thank you to Matthew for creating the .bat file in this option.

1 Click/tap on the Download button below to download the Get_Windows_Update_event_logs.bat file.

Download

(Contents of .bat file for reference.)

Code:

:: This script was created by Matthew Wai at TenForums.com/members/matthew-wai.html
:: https://www.tenforums.com/tutorials/67283-read-windows-update-logs-windows-10-a.html
::—————————————————————————————————————————————————————————————————————————————————————
@echo off & mode con cols=75 lines=6 & Title Collecting data from Event Viewer...
Echo.&Echo     Searching Event Viewer for logs about Windows Update. 
Echo     Please wait for a while.
::=====================================================================================
Set "+=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"
For /F "tokens=* " %%# in ('Reg Query "%+%" /V Desktop') Do (Set "#=%%#")
Set "#=%#:*REG_EXPAND_SZ    =%"
For /F "delims=" %%# in ('Echo "%#%"') Do (Set "#=%%#")
Set "[Desktop]=%#:~1,-1%" & For /f "tokens=2 delims==" %%# in (
'WMIC OS Get localdatetime /value') Do (Set "T=%%#")
Set "Y=%T:~0,4%" & Set "M=%T:~4,2%" & Set "D=%T:~6,2%"
Set "H=%T:~8,2%" & Set "#=%T:~10,2%" & Set "S=%T:~12,2%"
Set "[File]=%Temp%\Update events %Y%-%M%-%D% at %H%-%#%-%S%.txt"
::=====================================================================================
PowerShell $Host.UI.RawUI.BufferSize = New-Object Management.Automation.Host.Size(220,1000)
PowerShell Get-WinEvent -ProviderName 'Microsoft-Windows-WindowsUpdateClient'^|Select TimeCreated, Message^|FT -AutoSize>"%[File]%"
For %%# in ("%[Desktop]%\Update events*.txt") Do (Del "%%#")
Move "%[File]%" "%[Desktop]%">Nul
PowerShell "Start-Process Notepad.exe ""%[Desktop]%\Update events %Y%-%M%-%D% at %H%-%#%-%S%.txt"""
::—————————————————————————————————————————————————————————————————————————————————————

2 Save the Get_Windows_Update_event_logs.bat file to your desktop.

3 Unblock and run the Get_Windows_Update_event_logs.bat file.

4 A command prompt will open and close, and save a date and time stamped Update events 2021-04-27 at 09-18-36.txt file on your desktop that includes the Windows Update Client log files. (see screenshot below)

OPTION TWO

To read Windows Update logs using PowerShell

You must be signed in as an administrator to be able to do this option.

For more usage details on the Get-WindowsUpdateLog command, see: Get-WindowsUpdateLog | Microsoft Docs

1 Open an elevated PowerShell.

2 Copy and paste Get-WindowsUpdateLog into the elevated PowerShell, and press Enter.

When finished running, this will create a WindowsUpdate.log file on your desktop. It will take a moment to finish.

3 When finished, open the WindowsUpdate.log file on your desktop to read your Windows Update logs.

The WindowsUpdate.log file is only a static log file and will not update unless you repeat this option again.

OPTION THREE

To read Windows Update event logs in Event Viewer

1 Open the Win+X Quick Link menu, and click/tap on Event Viewer.

2 In the left pane of Event Viewer, navigate to the location below, and open the Operational log. (see screenshot below)

Applications and Service Logs\Microsoft\Windows\WindowsUpdateClient

3 You can now select event logs in the middle pane of Event Viewer to see their details. (see screenshot below)

That's it,
Shawn

Related Tutorials

---

• How to Check for and Install Windows Updates in Windows 10
• How to View Windows Update History in Windows 10
• How to Reset Windows Update in Windows 10

Windows 11 Tutorials