Traditional logs are good for looking at single events. The unified log is a unique platform for looking at statistics and patterns, which can reveal new knowledge – if you have the tools.
Console
A function of process activity, frequency of writing to the log, and its verbosity, log load is available for the past 3 months or more.
Most of what we know about log files, their maintenance by logd, the role of diagnosticd, and the differences between Persist and Special log files.
The catalogue includes the dates and times each log file was created and completed, size, and the period of time covered by it.
The combination lets you browse tracev3 log files within a log archive, which MakeLogarchive can create from raw logs in /var/db.
Consolation can now open logarchive and individual tracev3 log files, provided that they conform to Apple’s logarchive format.
Fixes an error on some systems which prevented archive generation, and adds a debug mode.
How to access raw log files generated by Sierra, High Sierra, iOS, etc., and a convenient utility to turn them into logarchives.
Sierra’s logs have changed, and now contain full entries for around 20 days. There’s also a log log, which has statistical summaries. All useful information for diagnosis and forensics.
Writes to the unified log in Sierra and now High Sierra too.
