Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
|Source: Windows Update Agent|
Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on <date> at <time>: <updates>.
|English: Request a translation of the event description in plain English.|
This event alone just notifies you that one or more updates are downloaded and ready to be installed. If the event is appearing repeatedly for the same update, this may indicate that that update is failing to install for a reason that you will need to investigate.
Several users reported that on a Windows XP SP2 system this problem was caused by a missing registry key. The key reported by the users is "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn". You could try to import this key, to see if the problem is fixed. Be sure to make a backup prior to trying this, and note that changing the registry can always cause trouble, so do this at your own risk. The following is the contents of the key from a Windows XP SP2 system.
Windows Registry Editor Version 5.00
|Private comment: Subscribers only. See example of private comment|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated