Forum Discussion
shockotechcom
Nov 07, 2021Iron Contributor
WSUS tbEventInstance Table TimeAtTarget column meaning
We have experienced a huge swell in our WSUS DB size. The table that's causing the swell in tbEventInstance. This table seems to hold all events that the clients send up to the WSUS server. Out clie...
LainRobertson
Nov 08, 2021Silver Contributor
Not really, no - at least not by default. If you're running something like System Center Configuration Manager then you get centralised reporting, but if you're operating at the "bare bones" level, you have these basic to mid-level options (using Windows 10 Enterprise as the reference):
- The "Reliability Monitor", which is handy if you're dealing with an end user over the phone;
- Event Viewer - as you've already noted;
- Get-WindowsUpdateLog, which is the "replacement" for the older, live WindowsUpdate.log file.
Technically, for Get-WindowsUpdateLog, it still uses the WindowsUpdate.log file, but rather than being the live file into which events are dropped by the Automatic Updates service (the old paradigm), now it's only generated on-demand by methods such as this commandlet.
That said, if you pair Get-WindowsUpdateLog with Invoke-Command (assuming you have WinRM configured across the client fleet), you at least have a "poor man's" automation option for generating and fetching the logs from multiple clients over the wire (connectivity permitting) to then inspect/diagnose locally.
In any case, all three options will give you the actual time of the event on the affected client.