Merges Windows Update .etl files into a single log file.
Windows Server · Risk: Low · Documentation Verified
Last verified: 2026-10-26
Microsoft WindowsUpdate reference: Merges Windows Update .etl files into a single log file. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.
Use an account with the target resource permissions documented for Get-WindowsUpdateLog. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.
Supported environments
Windows / WindowsUpdate · Windows Server 2025 documentation; feature/module prerequisites apply
Parameters
-Confirm
Prompts you for confirmation before running the cmdlet.
-ETLPath
Specifies an array of paths of Windows Update .etl files to convert into WindowsUpdate.log. The default value for this parameter is the Windows Update trace file directory for the current device. The acceptable values for this parameter are: - The full path of a directory that contains one or more .etl files. - The full path of a single .etl file. - A comma-separated list of full paths of .etl files.
-ForceFlush
Indicates that this cmdlet forces the Windows Update Agent on the current device to flush all of its traces to .etl files. This process stops the Update Orchestrator and Windows Update services. Running this cmdlet with this parameter requires administrative credentials. You can start Windows PowerShell with administrative credentials by using the Run as administrator command.
-IncludeAllLogs
Decodes all update-related logs: Windows Update, Update Session Orchestrator (USO), and the update user interface (UX). This parameter is mutually exclusive of all other parameters of this cmdlet. Specifying this parameter uses defaults for all other parameters. This parameter causes a folder to be created on the desktop and readable WindowsUpdate.log, USO.log, and UX.log files are written to it.
-LogPath
Specifies the full path to which Get-WindowsUpdateLog writes WindowsUpdate.log. The default value is WindowsUpdate.log in the Desktop folder of the current user.
-ProcessingType
Specifies the file type that Get-WindowsUpdateLog uses for temporary files that are created during intermediate processing. The acceptable values for this parameter are: - CSV (comma-separated values) - XML By default, the value is XML. The temporary files are in $env:TEMP\WindowsUpdateLog.
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet isn't run.
Prerequisites
Windows with the WindowsUpdate module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.
Security considerations
This is a read-oriented cmdlet; protect any sensitive results and check the documented effects of your selected parameters.
Examples
Example 1: Merge and convert Windows Update trace files
Get-WindowsUpdateLog
This command merges and converts Windows Update trace files (.etl files) into a single readable WindowsUpdate.log file. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.