Read Windows Update Logs in Windows 10  

Page 1 of 2 12 LastLast
    Read Windows Update Logs in Windows 10

    Read Windows Update Logs in Windows 10

    How to Read Windows Update Logs in Windows 10
    Published by Category: Windows Update & Activation
    27 Apr 2021
    Designer Media Ltd



    How to Read Windows Update Logs in Windows 10


    Starting with Windows 10 build 9926, Windows Update logs are no longer saved to "%windir%\Windowsupdate.log".

    Windows Update client now uses Event Tracing for Windows (ETW) to generate diagnostic logs saved as .etl files in the "%windir%\Logs\WindowsUpdate" folder. This method improves performance and reduces disk space usage. However, the logs are not immediately readable as written.

    Reference:

    This tutorial will show you how to read the Windows Update logs for your Windows 10 PC.


    Contents

    • Option One: To read Windows Update Client logs using BAT file
    • Option Two: To read Windows Update logs using PowerShell
    • Option Three: To read Windows Update event logs in Event Viewer






    OPTION ONE

    To read Windows Update logs using PowerShell


    Special thank you to Matthew for creating the .bat file in this option.


    1 Click/tap on the Download button below to download the Get_Windows_Update_event_logs.bat file.

    Download

    (Contents of .bat file for reference.)
    Code:
    :: This script was created by Matthew Wai at TenForums.com/members/matthew-wai.html
    :: https://www.tenforums.com/tutorials/67283-read-windows-update-logs-windows-10-a.html
    ::覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧
    @echo off & mode con cols=75 lines=6 & Title Collecting data from Event Viewer...
    Echo.&Echo     Searching Event Viewer for logs about Windows Update. 
    Echo     Please wait for a while.
    ::=====================================================================================
    Set "+=HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders"
    For /F "tokens=* " %%# in ('Reg Query "%+%" /V Desktop') Do (Set "#=%%#")
    Set "#=%#:*REG_EXPAND_SZ    =%"
    For /F "delims=" %%# in ('Echo "%#%"') Do (Set "#=%%#")
    Set "[Desktop]=%#:~1,-1%" & For /f "tokens=2 delims==" %%# in (
    'WMIC OS Get localdatetime /value') Do (Set "T=%%#")
    Set "Y=%T:~0,4%" & Set "M=%T:~4,2%" & Set "D=%T:~6,2%"
    Set "H=%T:~8,2%" & Set "#=%T:~10,2%" & Set "S=%T:~12,2%"
    Set "[File]=%Temp%\Update events %Y%-%M%-%D% at %H%-%#%-%S%.txt"
    ::=====================================================================================
    PowerShell $Host.UI.RawUI.BufferSize = New-Object Management.Automation.Host.Size(220,1000)
    PowerShell Get-WinEvent -ProviderName 'Microsoft-Windows-WindowsUpdateClient'^|Select TimeCreated, Message^|FT -AutoSize>"%[File]%"
    For %%# in ("%[Desktop]%\Update events*.txt") Do (Del "%%#")
    Move "%[File]%" "%[Desktop]%">Nul
    PowerShell "Start-Process Notepad.exe ""%[Desktop]%\Update events %Y%-%M%-%D% at %H%-%#%-%S%.txt"""
    ::覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧覧

    2 Save the Get_Windows_Update_event_logs.bat file to your desktop.

    3 Unblock and run the Get_Windows_Update_event_logs.bat file.

    4 A command prompt will open and close, and save a date and time stamped Update events 2021-04-27 at 09-18-36.txt file on your desktop that includes the Windows Update Client log files. (see screenshot below)

    Read Windows Update Logs in Windows 10-windows_update_client_event_logs.png






    OPTION TWO

    To read Windows Update logs using PowerShell


    You must be signed in as an administrator to be able to do this option.

    For more usage details on the Get-WindowsUpdateLog command, see: Get-WindowsUpdateLog | Microsoft Docs


    1 Open an elevated PowerShell.

    2 Copy and paste Get-WindowsUpdateLog into the elevated PowerShell, and press Enter.

    When finished running, this will create a WindowsUpdate.log file on your desktop. It will take a moment to finish.

    Read Windows Update Logs in Windows 10-get-windowsupdatelog.jpg

    3 When finished, open the WindowsUpdate.log file on your desktop to read your Windows Update logs.

    The WindowsUpdate.log file is only a static log file and will not update unless you repeat this option again.







    OPTION THREE

    To read Windows Update event logs in Event Viewer


    1 Open the Win+X Quick Link menu, and click/tap on Event Viewer.

    2 In the left pane of Event Viewer, navigate to the location below, and open the Operational log. (see screenshot below)

    Applications and Service Logs\Microsoft\Windows\WindowsUpdateClient

    3 You can now select event logs in the middle pane of Event Viewer to see their details. (see screenshot below)

    Read Windows Update Logs in Windows 10-windowsupdate_event_viewer_logs.png


    That's it,
    Shawn






  1. Posts : 48
    Windows 10 pro - 64 bit (20H2)
       #1

    Is it safe to share this file on here if someone asks while trying to troubleshoot a problem?
      My Computer


  2. Posts : 64,469
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    IcarusLSC said:
    Is it safe to share this file on here if someone asks while trying to troubleshoot a problem?
    Hello Icarus,

    Yes, it will be safe to post the log. It doesn't reveal any personal info.
      My Computers


  3. Posts : 93
    w10 pro64
       #3

    Would you please consider to add in this tutorial all other relevant info and scenarios for update logs usage?
    As in
    https://docs.microsoft.com/en-us/win...ws-update-logs
    and
    https://docs.microsoft.com/en-us/win...rade/setupdiag
    and
    Can't install KB4601319 - update fails and changes are rolled back.

    Your website is the only concise, detailed and practical source for windows woes and how-to's. And I am sure that this is not only for me. It is great to have an authoritative one-stop-shop.
      My Computers


  4. Posts : 7,564
    Windows 10 Home 20H2
       #4

    @Brink,

    Get_Windows_Update_event_logs.bat

    The above batch script will search Event Viewer for logs about WindowsUpdateClient and create a list of the results in a TXT file on the desktop like the one below. Do you think it can be added into this tutorial?
    Code:
    TimeCreated            Message                                                                                                                                                                                      
    -----------            -------                                                                                                                                                                                      
    4/27/2021 5:21:29 PM   Installation Successful: Windows successfully installed the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.337.29.0)                 
    4/27/2021 5:21:19 PM   Installation Started: Windows has started installing the following update: Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.337.29.0)                    
    4/27/2021 5:21:19 PM   An update was downloaded.                                                                                                                                                                    
    4/27/2021 5:21:19 PM   Windows Update started downloading an update.                                                                                                                                                
    4/27/2021 5:21:18 PM   Windows Update successfully found 0 updates.                                                                                                                                                 
    4/27/2021 5:21:18 PM   Windows Update successfully found 1 updates.         
    
     [... Abridged ...]
      My Computer


  5. Posts : 64,469
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #5

    Matthew Wai said:
    @Brink,

    Get_Windows_Update_event_logs.bat

    The above batch script will search Event Viewer for logs about WindowsUpdateClient and create a list of the results in a TXT file on the desktop like the one below. Do you think it can be added into this tutorial?
    Thank you Matthew. This has now been added as option 1 in the tutorial.
      My Computers


  6. Posts : 3
    Windows 10
       #6

    Schedule Update Log


    Hi Brink,
    You recall in Windows 7 where in the Windows Event logs how it would show "Scheduled Windows Update" and give the timestamp on the scheduled update as to when it will attempt to install? I cannot find this entry in my event logs. Did they remove this log type? I see "found update" and "downloaded" but not "scheduled". We have a WSUS Server and setup our Configure Updates to number 4 "autodownload and schedule update". In Windows 7 I could see in the log that it downloaded and then scheduled it but not in Win10. What am I missing? I looked at the logs from this thread.
    Read Windows Update Logs in Windows 10-1.png
      My Computer


  7. Posts : 7,564
    Windows 10 Home 20H2
       #7

    Jagowu888 said:
    I cannot find this entry in my event logs.
    See whether you can find it in the list created by the following batch script:

    getWindowsUpdateList.bat

    Reference: Batch files for use in BSOD debugging
      My Computer


  8. Posts : 3
    Windows 10
       #8

    I do not think i am explaining myself well. In WSUS I choose option 4. Well in the Windows event logs that i posted before i can see where an update is "found" and "installed" or "failed" but i do not see, what i use to see in windows 7, is that after it downloads an update from WSUS, i use to see a log that showed "scheduled installation of update KBxxxxx". Where can i find that on Win10?
    Read Windows Update Logs in Windows 10-1212121212.png
      My Computer


  9. Posts : 155
    Windows 10 Pro 64 bit
       #9

    Get_Windows_Update_Event_Logs.bat Was Blocked!


    I just tried to download Matthew's script and MS blocked it!

    Get_Windows_Update_Event_Logs.bat was blocked because it could harm your device.

    Next?

    thanks
    baumgrenze
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

ゥ Designer Media Ltd
All times are GMT -5. The time now is 17:39.
Find Us




Windows 10 Forums