Patching and servicing
8sources
42reasons
2conditions
8decode tables
Windows Update or the servicing stack failed to scan, download or install a patch.
How the agent recognises this on a host
- The Windows Update agent reports scan and pause state on the host.
- The servicing stack writes its own component and package logs on the host.
The sources below carry those markers.
| Source | What it is | Status |
|---|---|---|
| Windows Setup event log | The Setup channel: update and feature install outcomes as Windows itself records them. | Live |
| Windows System event log | The System channel: service, driver, disk, network, cluster and hardware faults from the operating system itself. | Live |
| Windows CBS servicing log | Component-Based Servicing: what the servicing stack actually did to a package, and why it stopped. | Live |
| Windows DISM servicing log | DISM servicing operations: image and component-store maintenance and their failure detail. | Live |
| Windows Update agent state | Whether this host is scanning, paused, or falling behind on updates. | Live |
What is scored here
| Source | Signals | What they are |
|---|---|---|
| Windows Application event log | 5 | restart manager app pending, win msi operation failed, win msi product install succeeded, win msi product reconfigure succeeded, win msi product removal succeeded |
| Windows application platform event channels | 4 | appx cleanup residue, appx deployment failed, appx deployment requeued, appx service start failed |
| Windows management event channels | 3 | bits transfer failed, patch download failed, patch scan failed |
| Windows Setup event log | 2 | patch install failed, win component store corruption |
| Windows System event log | 3 | patch install deferred, patch install failed, winre servicing failed |
| Windows CBS servicing log | 20 | win component store assembly missing, win component store corruption, win component store corruption recurring, win component store file flag corruption suspected, win component store file repaired, win component store payload corrupt, win component store payload unrepairable, win component store repair unavailable, win component store reprojection failed, win component store scan repaired corruption, win servicing commit skipped reboot required, win servicing component manifest unreadable, win servicing delta patch failed, win servicing duplicate update name, win servicing package manifest unreadable, win servicing package stage failed, win servicing source files missing, win servicing startup package failed, win servicing update package create failed, win sfc repair started |
| Windows DISM servicing log | 5 | win dism command failed, win dism feature change failed, win dism health command run, win dism reboot required, win servicing source files missing |
| Windows Update agent state | 2 | update scan is stale, updates paused |