Event banner
Event details
After watching the demo, I attempted to follow along and look for the .txt file found at C:\ProgramData\USOShared\Logs\User and System. However, there was no .txt file. Tried following Microsoft KB's found here: https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-logs and https://learn.microsoft.com/en-us/powershell/module/windowsupdate/get-windowsupdatelog?view=windowsserver2022-ps&viewFallbackFrom=win10-ps&preserve-view=tru . Get-WindowsUpdateLog -ETLPath resulted in error.
Is there a KB that shows how to convert the ETL files from C:\ProgramData\USOShared\Logs\User to .txt?
- This is amazing how Microsoft tries to stop people to read *.etl files. There was pretty good tool called Message Analyzer, but it was discontinued on 2019 and even download was removed from MS pages. For now we (as customers) have limited set for parsing etl - separate method for every case - one tool for performance related, one for network captures, one for updates (not covering it entirely).
- Appreciate the advice!
- Hey Donald, currently there is no publicly available way to convert USO ETL files to text. This tool: https://aka.ms/wucopylogsexternal does convert WU files to text format which you can use for your debugging needs!
- When will a tool be made available that can convert the USO or UX logs? We already had Get-WindowsUpdateLog to convert the WU ETLs. I feel like this session only increased frustration at how impossible it is to actually get at the detailed logging. (And that's not even talking about the inability to tail the logs in real-time...)
https://learn.microsoft.com/en-us/answers/questions/198731/convert-etl-trace-log-file-into-readable-txt-file
