Questions tagged [logs]

System files that contain system event information, errors, and crash information.

83 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6 votes
0 answers
389 views

iPhone app access log

I accidentally brought my iPhone 7 into my university examination and was wondering if I would be able to produce a log (record) of iPhone app access, to show that I never used it during that ...
Joe's user avatar
  • 61
5 votes
0 answers
867 views

MacOS unified logging: how can I filter messages based on tag on the command line?

I can add a message to the macos system log via the command line on Sierra or later as follows: logger -t "TestTag" "testing 1 2 3" How do I find all messages that have been tagged with TestTag? I ...
Les Hazlewood's user avatar
5 votes
0 answers
2k views

How to send macOS logs to syslog (graylog) server from /etc/asl.conf

I have recently setup a cool Graylog server for myself which I have various machines now sending their log output to. It's great and is helping me a ton. I want to do the same with macOS. There are ...
James T Snell's user avatar
3 votes
0 answers
929 views

Append instead of overwrite log file by StandardOutPath and StandardErrorPath

I have a launchd job that periodically runs in the background. Any stdout and stderr output during the job is logged to some files set in the job's plist using the StandardOutPath and ...
Erik's user avatar
  • 263
3 votes
0 answers
1k views

How to monitor Mac file sharing activity

I am a new Mac user and have struggled mightily to find an answer to this question in recent days. I’m running a MacOS Sierra client, and sharing a folder of files with other Macs on my local network....
Karen's user avatar
  • 31
3 votes
0 answers
2k views

macOS new logging api (unified logging) log stream

Questions: 1) How can we redirect the log stream from stdin to, for example lnav? Currently, I use bash | (pipe), but I would like to hear if there is a better way to do it - the pipe buffer flow is ...
PJJ's user avatar
  • 2,316
2 votes
0 answers
358 views

/private/var/log/install.log too big

'Too big' might be a relative concept, but most of the files I see in var/log are measured in KB. install.log is 1.7GB & goes all the way back to 2018. I'd kind of assumed that automatic trimming/...
Tetsujin's user avatar
  • 109k
2 votes
0 answers
2k views

How do you turn on crontab logging on Big Sur?

I am running macOS Big Sur 11.2.1 and have several crontab jobs set up and they work fine, but I want to turn on the logging of all of my crontab jobs. I have read that with the recently releases such ...
KS_on_StackExchange's user avatar
2 votes
0 answers
63 views

Check system logs for "Service Battery" entry

I would like to find evidence of when the "Service Battery" warning has been activated. I knoow the console.app exists, but I'm not sure how to query it for what I am looking for. Why I want to do ...
fingia's user avatar
  • 133
2 votes
0 answers
2k views

Was my Macbook Pro remotely accessed?

I'm running Mojave on a Macbook Pro. A while ago, my screen started randomly scrolling down by itself while I was using Safari, and the problem persisted for a few seconds. The scrolling seemed almost ...
creative_uncreative's user avatar
2 votes
0 answers
2k views

How to create a cron log file in macOS High Sierra

I have an issue with cron in macOS High Sierra. I have cron running, and it is running the jobs I want to run. I am unable, however, to figure out how to make it create a cron.log file in /var/log. ...
user1517199's user avatar
2 votes
0 answers
58 views

How can I tell the exact time when a drive disconnected?

I have a USB drive (a Drobo) that appears disconnecting randomly after 10-20 hours. I'm trying to gather data to help understand the root cause of the problem so I'd like to understand the timing of ...
Ivar's user avatar
  • 179
2 votes
0 answers
73 views

How to get output from the console.app from a non-admin account?

I almost exclusively use a non-admin account for everyday use. Only for installing software, etc. I log in with the admin account. This normally works very well, however, there is one issue I haven't ...
n1000's user avatar
  • 7,454
2 votes
0 answers
882 views

How to find if someone logged into my iPhone

I suspect that someone has logged on my iPhone (physical access, with my code) Is there a report of all connections with the hours that can be found on the iPhone so I can confirm my suspicions? If ...
Clément Egger's user avatar
2 votes
0 answers
12k views

What is `IMDPersistenceAgent` and error in `com.apple.corespotlight.log.index`?

I am see this appear repeatedly in my log. Jan 6 18:23:46 johndoe-macbook com.apple.spotlight.IndexAgent[12337]: [com.apple.corespotlight.log] Not allowed to pass in bundle ID Jan 6 18:23:46 ...
Basil Bourque's user avatar
2 votes
0 answers
87 views

CPU freezes after Sierra update

Last night I managed to update to Sierra. Now there is a problem with the OS X speed. I read that there are Spotlight and iPhotos indexing stuff in the background. However, the main CPU usage comes ...
Deimos's user avatar
  • 31
2 votes
1 answer
3k views

How do I know my mac turns off because of overheating?

My Macbook Pro (Yosemite) early 2011 sometimes unexpectedly turns off when running heavy tasks on battery power. Is there a way to confirm this is because of overheating? Here's a part of system.log ...
Dan's user avatar
  • 129
2 votes
0 answers
1k views

Where does Transmission store logs for called scripts?

Transmission has an option to run a shell script when a file finishes downloading. I'm wondering where to look for logs for it – it seems like it only executes half of my script but can't figure out ...
Jusi's user avatar
  • 151
2 votes
0 answers
186 views

Is there any way to view the names of files from before iTunes renamed them?

So here's my sad story guys. I'm a songwriter and I have a ton of audio files on my computer. I spent the last week or so going through them all (some were in iTunes, some were scattered across the HD)...
AmadeusDrZaius's user avatar
1 vote
1 answer
2k views

How to read microstackshots file?

In the root folder of the sysdiagnose logs analytic data there is a specific file named "microstackshots". Have someone tried to investigate its content? I could not find a way to execute/...
toniosol's user avatar
1 vote
0 answers
249 views

Mac OS configure syslog send logs to remote rsyslog server encrypted (TLS/SSL)

Can MacOS syslog, send logs to remote rsyslog server using TLS/SSL ?
user2410170's user avatar
1 vote
0 answers
129 views

View log-levels for entries added by “logger” command

I log with /usr/bin/logger, which provides a switch -p to set the priority. Example: logger -p user.warning "My program crashed." I can see this message via the Console, but I don’t see its ...
Franklin Yu's user avatar
1 vote
0 answers
104 views

macOS Monterey find last time Bluetooth mouse was connected

I have lost my Bluetooth Mouse. I would like to find the last date of connection to know when i last had it. I already tried blueutil --recent the output does update the time everytime I retry the ...
bobbycarbob's user avatar
1 vote
0 answers
18 views

Keep all messages in Console

On macOS High Sierra (10.13.6), Console.app automatically trims old messages when it exceeds 50000. Significance: When I'm searching for specific keywords or processes, after I select the relevant ...
Joy Jin's user avatar
  • 2,255
1 vote
0 answers
309 views

List all entries of 'Lock Screen' events from logs

I am trying to access the logs that show when the screen was locked (e.g Apple Icon > Lock Screen). After looking in the Console app I think the event is called 'kAELockScreenEvent', but I am not ...
user3379459's user avatar
1 vote
0 answers
2k views

What does ContextStoreAgent do, and how can its database errors be fixed?

On my macOS 11.5.2 (Big Sur) system, the logs are full of the following error reported by a process called ContextStoreAgent: CoreData: PostSaveMaintenance: performPostSaveTasks threw something (1). ...
jstarek's user avatar
  • 3,348
1 vote
0 answers
483 views

Get Bluetooth (AirPods) logs

I am trying to find the last location of my lost AirPods. Is there a chance to find a log file in my iPhone showing the last connection with them? I do not have a macOS in order to use this solution ...
Ribas's user avatar
  • 11
1 vote
0 answers
503 views

Why is wifi log filling with Usb Host Notification messages?

A backup external hard drive (WD G Drive) is attached via USB. When I detach it, the messages below stop. When I reattach it, the messages don't continue. I was casually checking logs on a Mac with ...
Julius Baer's user avatar
1 vote
0 answers
131 views

Inspect kernelmanagerd log

With BigSur, I have the notorious problem of the kernelmanagerd process constantly using a large part of the CPU (at least 35/40%). so, following the various guides found online, I have: uninstalled ...
luke88's user avatar
  • 121
1 vote
0 answers
434 views

Logging from AppleScript in Automator

I am writing an AppleScript (Run AppleScript item) from within an application in Apple Automator, but the Log panel at the bottom of the window does not display any logged messages (that is, anything ...
Noldorin's user avatar
  • 997
1 vote
0 answers
575 views

how remove Apple support screen sharing software

I contacted the Apple support team and the technician asked me to install a software on my macbook so as to share my screen with him. I granted "record screen" permission to this software. A ...
Gogo123's user avatar
  • 111
1 vote
0 answers
50 views

Extracting diagnostic logs from iPad 2 with macOS Catalina

I have an iPad 2 from wich I want to extract the diagnostic logs. The use case is a failed activation that blocks me from using the iPad or restoring it with my Laptop. I have a separate question for ...
youngsinatra's user avatar
1 vote
0 answers
121 views

macOS removes log files in unwanted way

My computer is used for website development. As part of the website application, I have created log files, which previously had been stored in /var/log/webapps/appname (where appname varies per ...
Jeffrey Simon's user avatar
1 vote
0 answers
129 views

Identify which user or process initiated normal shutdown?

I'd like to identify why (who, what) showdown my MacBook Pro while it was left unattended. Some unsaved work was lost. It is fairly likely that a careless admin script was run through some automated ...
NoahR's user avatar
  • 173
1 vote
0 answers
88 views

Logs of installed applications

Based on this question: How to read iPhone system logs? Will I find in these logs when applications were installed?
Warok's user avatar
  • 111
1 vote
1 answer
635 views

Viewing Logs on Startup volume that freezes

I have a MacBook Pro (Computer A) which freezes / restarts during startup. To investigate the problem, I purchased a brand new internal disk and did a basic installation (10.13 - the latest this model ...
Zonker.in.Geneva's user avatar
1 vote
0 answers
589 views

What is log message `Failed to remove attribute… "Operation not permitted"` during Time Machine backup?

When my macOS laptop does Time Machine backups, I see in the log a pattern of error messages reading, Failed to remove attribute '…' from 'file:///', error: Error Domain=NSPOSIXErrorDomain Code=1 "...
Jim DeLaHunt's user avatar
1 vote
0 answers
206 views

Diagnosing an intermittent system crash - how to analyse a spindump file

I am trying to figure out the root cause of full system crashes that I am sometimes experiencing in MacOS. It's an ongoing but intermittent issue that I've been encountering both in 10.15 and also in ...
Rick Curran's user avatar
1 vote
0 answers
406 views

Is there a log somewhere that will show when I have done screensharing?

Over the past week, I have been doing a lot of remote access using the Screen Sharing.app. Is there a place that logs when I have used it and for how long? I've looked in the Console.app but haven't ...
exodus's user avatar
  • 11
1 vote
0 answers
646 views

Remove the "Legacy Software" and "Installations" lists of System Information

There are a couple of programs listed in Legacy Software in the System Information: Is it possible to remove those entries? They are all old apps I've uninstalled, so there is no need to keep those ...
Edd Growl's user avatar
  • 2,554
1 vote
0 answers
33 views

How to browse var/log directories in console app as could be done in OS versions prior to Catalina?

In Mac OS prior to Catalina, the left sidebar in the console app would show a directory tree for the /var/log directory and a few other log directories. These could be expanded to navigate logs for ...
user1533191's user avatar
1 vote
0 answers
2k views

Getting logs from Apple or iPhone when someone looks up someone's location

Details: Someone close to me and that I trusted logged into my iPhone and turned on Share my Location with their phone. On iMessages I see the note that says iMessage with 3*******78 You started ...
LarryW's user avatar
  • 11
1 vote
0 answers
29 views

How to see the log of specific activity on Mojave?

There are applications (eg. timing app.com) which once installed can log one's daily activity (websites visited, docs opened, time spent on an app etc.), but how can one do this without installing ...
retrograde's user avatar
1 vote
0 answers
269 views

How to get LOG_DAEMON syslog messages available via asl

I am attempting to run unbound on my macOS Mojave. This works. I can also log from unbound to a file. That works. But I want to log to syslog. Unbound logs to the LOG_DAEMON (daemon) facility. So I ...
gctwnl's user avatar
  • 634
1 vote
0 answers
64 views

Broken macOS High Sierra log system?

With /usr/bin/log I can get information about the mail services from macOS's log system. E.g. /usr/bin/log show --start '2019-08-07 12:50:59' --end '2019-08-07 13:00:59' --predicate '(process == "smtp"...
gctwnl's user avatar
  • 634
1 vote
0 answers
258 views

Why has the MacOs Diagnostic Log shown an asterisk in an application path?

SuperDuper! crashed recently, and when looking at the report I found /Applications/Tools/*/SuperDuper!.app/Contents/MacOS/SuperDuper! The surprising part is the *, which I've never seen before. ...
Taryn's user avatar
  • 121
1 vote
0 answers
102 views

How to isolate systemic hangs in macOS 10.14?

I'm struggling with some kind of a hang that is very elusive. Apple can't seem to isolate the problem after many sysdiagnose submissions. It predominantly happens in instances of Google Chrome, Finder ...
ylluminate's user avatar
  • 5,062
1 vote
0 answers
44 views

Someone has files from my Mac on their external hard drive

I have my housemate's old Mac. He still has an account on it, neither of us have each others passwords so we cannot access each others accounts, and public file sharing is turned off (and I don't keep ...
Jason's user avatar
  • 11
1 vote
0 answers
45 views

How can I debug an unrecognised display in High Sierra?

My external monitor recently stopped being recognised by my MacBook Pro (Early 2011 - 8,2, High Sierra, 10.13.6) I have reset PRAM / SMC and tried a number of troubleshooting steps as outlined in the ...
codecowboy's user avatar
  • 3,193
1 vote
0 answers
30 views

How to troubleshoot spurious restart?

MBP 15 inch 2018, 2.9 GHz i9, 32 GB, 2TB; 10.13.6 If I leave my system unattended for several hours, it will restart itself - as if someone selected applemenu>Restart... Apple has been no help so ...
jbreher's user avatar
  • 11