Advanced Computer Solutions

ACS Blog

How to Check Windows Event Logs for Update History

| IT Fixes

Who This Applies To and What It Does

This guide is for any Windows PC user who needs to verify whether updates were installed successfully or troubleshoot an update problem. By using the built-in Event Viewer application, you can filter Windows update activity by result—successful, failed, canceled, or requiring a reboot—without needing special software or administrator tools.

Step 1: Open Event Viewer

  1. Press Windows Key + S to open the search bar.
  2. Type Event Viewer and select it from the search results.

Step 2: Navigate to the Update Logs

  1. In the Event Viewer window, expand Windows Logs in the left-hand panel.
  2. Click on System to view system-level logs.

Tip: You can sort logs by clicking the Source column header, or use the built-in search functionality to navigate large log files more easily.

Step 3: Filter for Update Events

  1. In the Actions panel on the right side, click Filter Current Log.
  2. In the filter dialog box, set Event Sources to WindowsUpdateClient.

  3. Optionally, enter one or more of the following Event IDs to narrow your results:

    • 19 — Installation successful
    • 20 — Installation failed
    • 21 — Updates canceled
    • 30 — Reboot required
  4. Click OK to apply the filter.

Step 4: Review the Update Events

  1. Look through the filtered results to find events related to your updates.
  2. Double-click any event to open its details, which include the update name, status, and timestamps.

Step 5: Clear or Export Logs (Optional)

  1. To remove old entries and declutter Event Viewer, right-click the System log and choose Clear Log. Only do this if you no longer need the information.
  2. To keep a record, choose Save All Events As to archive the logs for future reference.

A Few Things to Keep in Mind

  • The Windows Update Service must be running for recent update logs to appear in Event Viewer.
  • PowerShell or other command-line tools can be used for more advanced log queries if needed.
  • Event Viewer also captures logs for other issues, such as hardware or application failures, making it a useful general troubleshooting tool.

Need Help?

If you are unable to find your update logs or need assistance interpreting the results, contact the ACS support team and we will be glad to help.

Common questions

What Event ID means a Windows update installed successfully?

Event ID 19 in the WindowsUpdateClient source indicates that an update was installed successfully. You can filter for this ID in the Filter Current Log dialog inside Event Viewer.

Why are there no update events showing in Event Viewer?

If no update events appear after filtering, the Windows Update Service may not be running. Ensure the service is active, then check Event Viewer again for recent logs.

Can I save my Event Viewer logs before clearing them?

Yes. Before clearing the System log, right-click it and choose Save All Events As to export and archive the log file for future reference.