Event ID 21 — Restart Required: To complete the installation of the following updates, the computer must be restarted.
Description
Restart Required: To complete the installation of the following updates, the computer must be restarted. Until this computer has been restarted, Windows cannot search for or download new updates: updatelist.
Message #
Fields #
| Name | Description |
|---|---|
updatelist UnicodeString | — |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-WindowsUpdateClient",
"guid": "945A8954-C147-4ACD-923F-40C45405A658",
"event_source_name": "",
"event_id": 21,
"version": 0,
"level": 4,
"task": 2,
"opcode": 15,
"keywords": 9223372036854775872,
"time_created": "2013-10-23T17:27:37.645375Z",
"event_record_id": 832,
"correlation": {},
"execution": {
"process_id": 916,
"thread_id": 700
},
"channel": "System",
"computer": "IE8Win7",
"security": {
"user_id": "S-1-5-18"
}
},
"user_data": {
"updatelist": {
"#attributes": {
"xmlns:auto-ns3": "http://schemas.microsoft.com/win/2004/08/events",
"xmlns": "http://manifests.microsoft.com/win/2004/08/windows/eventlog"
},
"#text": "\n- Update for Windows 7 (KB2502285)\n- Security Update for Windows 7 (KB2790113)\n- Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 x86 (KB2604114)\n- Update for Windows 7 (KB2779562)\n- Update for Windows 7 (KB2387530)\n- Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 x86 (KB2756920)\n- Update for Windows 7 (KB2541014)\n- Update for Windows 7 (KB2533552)\n- Security Update for Windows 7 (KB2691442)\n- Security Update for Windows 7 (KB979688)\n- Update for Windows 7 (KB979538)\n- Security Update for Windows 7 (KB2511455)\n- Security Update for Windows 7 (KB2506212)\n- Security Update for Windows 7 (KB979309)\n- Update for Windows 7 (KB2748349)\n- Security Update for Windows 7 (KB2658846)\n- Update for Rights Management Services Client for Windows 7 (KB979099)\n- Update for Windows 7 (KB2640148)\n- Security Update for Windows 7 (KB2442962)\n- Security Update for Windows 7 (KB2281679)\n- Security Update for Windows 7 (KB2712808)\n- Update for Windows 7 (KB2467023)\n- Update f"
}
}
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline