The fields stored in the log have changed across Sierra and High Sierra. Analyse them on the wrong system, and you could lose content without being aware of it.
Consolation
Support for the unified log’s new features in both High Sierra and Mojave, including Signposts and performance analysis. Now, and free.
Changes include an additional output text format, display log since the last boot, and support for Mojave’s Signposts is already present and being used by Apple.
Improved usability including keystroke shortcuts, and three bugs fixed – one of which disabled use of custom settings files.
My free log browser is progressing towards version 3 release. This beta can save as RTF, runs slow tasks in the background, and has a smaller minimum window size.
Are we in for some real surprises, like tools and documentation, or just razzle-dazzle, smoke and mirrors?
When you upload a file to iCloud Drive, the steps involved are complex. They’re outlined and diagrammed here, with pointers to how to diagnose and resolve problems.
Waypoints identified for shutdown and startup, login, system sleep and wake, and fast user switching. How to write to the log from a shell script, and accessing the separate installation log. Finally, security and audit.
Formatting log extracts, understanding and selecting the fields to display, predicates to filter an extract, using string search, and top-down search for working with the unified log.
How it came about, what Apple’s goals were and their effect on the log contents, how it works, and an overview of the tools available to work with it.
The Eclectic Light Company 