Where to get useful Windows logs

  1. CBS servicing log: find CBS.log in the Windows servicing logs and copy only the lines around the timestamp of the failure.
  2. DISM log: check the DISM log for the same repair attempt and compare the code and time rather than treating one line as a final result.
  3. Windows Update: export a text WindowsUpdate.log or select the relevant update event as XML/CSV from Event Viewer.
  4. Event Viewer: export selected events as XML or CSV. This tool does not read the binary .evtx container directly.
Privacy reminder

Logs may contain account names, file paths, device information or internal network details. Review the text before sharing it with anyone. Although this analyzer does not upload it, remove private information before copying a report elsewhere.