
To find the Windows Update Log in Windows 10, do the following. One of them is a special PowerShell cmdlet and the other one is the built-in Event Viewer tool. To overcome it and make the Windows Update log readable, Windows 10 provides two methods to read the log. To make matters worse, these *.etl files are cached, so their contents doesn't become available instantly. While switching to ETL files has allowed Microsoft to reduce the disk load and not impact disk I/O or operating system performance, this method makes it harder for users to easily read the log.

In Windows 10, Windows Update is almost active all the time since it is a service so the log file has to be maintained and written to on a nearly continuous basis. The *.etl files are created by the the Event Tracing subsystem for Windows (ETW).
