To know the system level errors for patch management jobs, we need to check WindowsUpdate.log
In Windows 7 and lower versions: Open C:\Windows\WindowsUpdate.log and search for SapphireIMS keyword to know if any error during scan/deployment from SapphireIMS.
In Windows 8 and later versions: the log will not be directly written, instead it will be stored in ETL format and powershell command to be used to make those logs readable. Please follow below steps:
1. Open PowerShell.
2. Type the following command at the PowerShell console: Get-WindowsUpdateLog
3. When it finishes running, the cmdlet will create the classic WindowsUpdate.log file in your desktop folder. You can open it with text editor and search for SapphireIMS keyword to know if any system error during the scan/deployment.