Mac OS: Log-foo

TL;DR

Display all events since last boot

In Terminal:

sudo log show --boot --debug | more

Display all Kernel events from the last 10 minutes

In Terminal:

sudo log show --predicate "processID=0" --start "$(date -v-10M "+%Y-%m-%d% %H:%M:%S")" --debug 
  • processid=0 means kernel
  • $date -v-10M means 10 minutes ago

Comments

Popular posts from this blog

Ansible and aws: adding hosts to known_hosts