Microsoft-Windows-WUSA

11 events across 2 channels

Event ID 1 — DebugMessage.

Provider
Microsoft-Windows-WUSA
Channel
Debug

Message #

%1

Fields #

NameDescription
DebugMessage UnicodeString

Event ID 2 — Windows update UpdateTitle was successfully installed.

Provider
Microsoft-Windows-WUSA
Channel
Setup

Description

Windows update UpdateTitle was successfully installed. (Command line: "CommandLine").

Message #

Windows update %1 was successfully installed. (Command line: "%2")

Fields #

NameDescription
UpdateTitle UnicodeString
CommandLine UnicodeString

Event ID 3 — Windows update UpdateTitle could not be installed because of error ErrorCode "ErrorString" (Command line: "CommandLine").

Provider
Microsoft-Windows-WUSA
Channel
Setup
Level
Error

Description

Windows update UpdateTitle could not be installed because of error ErrorCode "ErrorString" (Command line: "CommandLine").

Message #

Windows update %1 could not be installed because of error %2 "%3" (Command line: "%4")

Fields #

NameDescription
UpdateTitle UnicodeString
ErrorCode UInt32
ErrorString UnicodeString
CommandLine UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WUSA",
    "guid": "09608C12-C1DA-4104-A6FE-B959CF57560A",
    "event_source_name": "",
    "event_id": 3,
    "version": 0,
    "level": 2,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-02-17T05:28:30.595643+00:00",
    "event_record_id": 12,
    "correlation": {},
    "execution": {
      "process_id": 12988,
      "thread_id": 7580
    },
    "channel": "Setup",
    "computer": "LAB-WIN11.ludus.domain",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "UpdateTitle": "",
    "ErrorCode": 2147942402,
    "ErrorString": "The system cannot find the file specified.",
    "CommandLine": "C:\\Windows\\system32\\wusa.exe C:\\Windows\\Temp\\Windows6.1-KB3033929-x64.msu  /quiet /norestart"
  },
  "message": ""
}

Event ID 4 — Windows update UpdateTitle requires a computer restart to complete the installation.

Provider
Microsoft-Windows-WUSA
Channel
Setup

Description

Windows update UpdateTitle requires a computer restart to complete the installation. (Command line: "CommandLine").

Message #

Windows update %1 requires a computer restart to complete the installation. (Command line: "%2")

Fields #

NameDescription
UpdateTitle UnicodeString
CommandLine UnicodeString

Event ID 5 — This computer will restart to complete the installation of Windows update UpdateTitle (Command line: "CommandLine").

Provider
Microsoft-Windows-WUSA
Channel
Setup

Description

This computer will restart to complete the installation of Windows update UpdateTitle (Command line: "CommandLine").

Message #

This computer will restart to complete the installation of Windows update %1 (Command line: "%2")

Fields #

NameDescription
UpdateTitle UnicodeString
CommandLine UnicodeString

Event ID 6 — The Windows Modules Installer must be updated before you can install this package (Command line: "CommandLine").

Provider
Microsoft-Windows-WUSA
Channel
Setup

Description

The Windows Modules Installer must be updated before you can install this package (Command line: "CommandLine").

Message #

The Windows Modules Installer must be updated before you can install this package (Command line: "%1")

Fields #

NameDescription
CommandLine UnicodeString

Event ID 7 — Windows update UpdateTitle was successfully uninstalled.

Provider
Microsoft-Windows-WUSA
Channel
Setup

Description

Windows update UpdateTitle was successfully uninstalled. (Command line: "CommandLine").

Message #

Windows update %1 was successfully uninstalled. (Command line: "%2")

Fields #

NameDescription
UpdateTitle UnicodeString
CommandLine UnicodeString

Event ID 8 — Windows update UpdateTitle could not be uninstalled because of error ErrorCode "ErrorString" (Command line: "CommandLine").

Provider
Microsoft-Windows-WUSA
Channel
Setup

Description

Windows update UpdateTitle could not be uninstalled because of error ErrorCode "ErrorString" (Command line: "CommandLine").

Message #

Windows update %1 could not be uninstalled because of error %2 "%3" (Command line: "%4")

Fields #

NameDescription
UpdateTitle UnicodeString
ErrorCode UInt32
ErrorString UnicodeString
CommandLine UnicodeString

Event ID 9 — Windows update UpdateTitle requires a computer restart to finish uninstalling.

Provider
Microsoft-Windows-WUSA
Channel
Setup

Description

Windows update UpdateTitle requires a computer restart to finish uninstalling. (Command line: "CommandLine").

Message #

Windows update %1 requires a computer restart to finish uninstalling. (Command line: "%2")

Fields #

NameDescription
UpdateTitle UnicodeString
CommandLine UnicodeString

Event ID 10 — This computer will restart to finish uninstalling Windows update UpdateTitle (Command line: "CommandLine").

Provider
Microsoft-Windows-WUSA
Channel
Setup

Description

This computer will restart to finish uninstalling Windows update UpdateTitle (Command line: "CommandLine").

Message #

This computer will restart to finish uninstalling Windows update %1 (Command line: "%2")

Fields #

NameDescription
UpdateTitle UnicodeString
CommandLine UnicodeString

Event ID 11 — This operation cannot be completed.

Provider
Microsoft-Windows-WUSA
Channel
Setup

Description

This operation cannot be completed. You must install the baseline update(s) before you can install this update. (Command line: "CommandLine").

Message #

This operation cannot be completed. You must install the baseline update(s) before you can install this update. (Command line: "%1")

Fields #

NameDescription
CommandLine UnicodeString