Patching and servicing
6sources
40reasons
2conditions
5decode tables
Windows Update or the servicing stack failed to scan, download or install a patch.
How the agent recognises this on a host
- The Windows Update agent reports scan and pause state on the host.
- The servicing stack writes its own component and package logs on the host.
The sources below carry those markers.
| Source | What it is | Status |
|---|---|---|
| Windows Setup event log | The Setup channel: update and feature install outcomes as Windows itself records them. | Live |
| Windows System event log | The System channel: service, driver, disk, network, cluster and hardware faults from the operating system itself. | Live |
| Windows CBS servicing log | Component-Based Servicing: what the servicing stack actually did to a package, and why it stopped. | Live |
| Windows DISM servicing log | DISM servicing operations: image and component-store maintenance and their failure detail. | Live |
| Windows Update agent state | Whether this host is scanning, paused, or falling behind on updates. | Planned |
What is scored here
| Source | Signals | What they are |
|---|---|---|
| Windows Application event log | 6 | restart manager app pending, win msi install error, win msi operation failed, win msi product install succeeded, win msi product reconfigure succeeded, win msi product removal succeeded |
| Windows Setup event log | 2 | win component store scan found corruption, win servicing package state change failed |
| Windows System event log | 2 | patch install failed, winre servicing failed |
| Windows CBS servicing log | 25 | win component store assembly missing, win component store corrupt blocks package, win component store corruption recurrence, win component store file repaired, win component store flag corruption suspected, win component store payload corrupt, win component store payload unrepairable, win component store repair completed, win component store repair unavailable, win component store reprojection failed, win component store scan found corruption, win component store scan repaired corruption, win component store source missing, win component store sxs corrupt, win servicing commit skipped reboot required, win servicing delta patch failed, win servicing duplicate update name, win servicing manifest malformed, win servicing manifest unparseable, win servicing package change reported, win servicing package stage failed, win servicing session finalized, win servicing startup package failed, win servicing update package create failed, win sfc repairing components |
| Windows DISM servicing log | 5 | win dism command failed, win dism feature change failed, win dism health command run, win dism reboot required, win dism source files missing |
| Windows Update agent state | 2 | update scan is stale, updates paused |