- Provider
- Microsoft-Windows-WindowsUpdateClient
- Channel
- System
- Level
- Informational
- Task
- AutomaticUpdates
- Opcode
- Download
Message #
Installation Ready: The following updates are downloaded and ready for installation. To install the updates, an administrator should log on to this computer and Windows will prompt with further instructions: %1
Example Event #
{
"system": {
"provider": "Microsoft-Windows-WindowsUpdateClient",
"guid": "945A8954-C147-4ACD-923F-40C45405A658",
"event_source_name": "",
"event_id": 17,
"version": 0,
"level": 4,
"task": 2,
"opcode": 12,
"keywords": 9223372036854775828,
"time_created": "2016-09-20T12:50:52.357570Z",
"event_record_id": 8223,
"correlation": {},
"execution": {
"process_id": 908,
"thread_id": 3440
},
"channel": "System",
"computer": "IE10Win7",
"security": {
"user_id": "S-1-5-18"
}
},
"user_data": {
"updatelist": {
"#attributes": {
"xmlns:auto-ns3": "http://schemas.microsoft.com/win/2004/08/events",
"xmlns": "http://manifests.microsoft.com/win/2004/08/windows/eventlog"
},
"#text": "\n- Definition Update for Windows Defender - KB915597 (Definition 1.227.2715.0)"
}
}
}