I have a windows 2k8 machine that generated almost 40,000 WinEventLog:System events in the period of about 20 minutes. The breakdown of these events by eventcode was approximately:
4373 46% 4371 46% 4383 7% 4372 1%
Microsoft-Windows-Servicing seemed to go crazy for a short time.... looking at updates, changing the state of updates etc. What could have caused this?
Many of the events seem to come in pairs of:
Windows Servicing started a process of changing package KBfoobar state from Installed(Installed) to Installed(Installed)
Windows Servicing successfully set package KBfoobar state to Installed(Intstalled)