How to Collect Diagnostic Logs in Windows

There are many different types of diagnostic logs in Windows. Each log is to diagnose a specific component. The Windows Update client creates the Windows Update ETL or Windows Update log files, the Component-Based Servicing uses “cbs.log”, and the DISM tool writes to “dism.log”, etc.

This post tells you how to collect various diagnostic logs in Windows.

Collecting Diagnostic Logs

CBS and DISM Logs

The CBS log is used by Component Based Servicing (TrustedInstaller.exe), which is responsible for applying updates and features. Every update you install or every component you remove or repair (using DISM or PowerShell) is recorded in the CBS.log. Additionally, the System File Checker (Sfc.exe) logs the repair operations in CBS.log. The CBS.log file is located here:

When the CBS.log file size becomes huge, Windows archives the contents of the log into separate CAB files. The archived log files (.CAB) have the following naming convention:

The DISM log is created when you run the DISM.exe console tool. It contains the summary of events that occurred when running a DISM command. The DISM.log file is located here:


When DISM installs or repairs a component or feature, it logs the details into CBS.log as well. Hence it’s recommended to collect both CBS and DISM logs for analysis.

Collecting the CBS and DISM logs

To collect the CBS and DISM logs so you can share them with someone, follow these steps:

  1. Open the folder “C:\Windows\Logs\
  2. Select the two folders, namely, CBS and DISM.
  3. Right-click on the selection, and click Send to → Compressed (zipped) folder.
    CBS send to compressed folder
    If you’re using Windows 11, click “Show more options” in the right-click menu, and click Send to → Compressed (zipped) folder. Alternatively, you can click on the “Compress to ZIP file” option in the fast context menu.
    CBS create zip folder
  4. Click Yes when you see the following prompt:
    create zip folder on desktop
    Windows cannot create the Compressed (zipped) Folder here. Do you want it to be placed on the desktop instead?

That’s it. The Zip file is saved to your desktop.

CBS and DISM logs zipped

One small request: If you liked this post, please share this?

One "tiny" share from you would seriously help a lot with the growth of this blog. Some great suggestions:
  • Pin it!
  • Share it to your favorite blog + Facebook, Reddit
  • Tweet it!
So thank you so much for your support. It won't take more than 10 seconds of your time. The share buttons are right below. :)

Ramesh Srinivasan is passionate about Microsoft technologies and he has been a consecutive ten-time recipient of the Microsoft Most Valuable Professional award in the Windows Shell/Desktop Experience category, from 2003 to 2012. He loves to troubleshoot and write about Windows. Ramesh founded in 2005.

Leave a Comment