GetWindowsUpdateLog

Get-WindowsUpdateLog is a Windows PowerShell command that converts Windows Update event traces into a readable WindowsUpdate.log file. It is used by IT administrators and advanced users to troubleshoot update failures by producing a human-friendly transcript of the Windows Update activity contained in ETW trace data.

Background and purpose: On newer Windows versions, the standard WindowsUpdate.log is not generated in the same readable form, making diagnostics rely on trace data. Get-WindowsUpdateLog reconstructs a readable log from these traces and writes it to a file, typically at C:\WindowsUpdate.log. It does not alter system settings or update behavior.

Usage: Run in an elevated PowerShell session. Invoke Get-WindowsUpdateLog to create the readable log at the default location. You can direct output to a different path with a parameter such as -LogPath, and you can enable verbose output with -Verbose. The time to complete depends on the size of the collected traces.

Output and contents: The resulting WindowsUpdate.log is a plain text file that records update checks, download and installation steps, reboot events, and error codes with timestamps. It is intended for manual review, troubleshooting, or sharing with support personnel.

Limitations and compatibility: Availability depends on the Windows version and the included PowerShell module. The command reads existing Windows Update trace data; if traces are missing or rotated, the output may be incomplete. It does not perform updates or modify update behavior.

See also: Windows Update, WindowsUpdate.log, Windows Event Tracing, PowerShell.