Formatting log extracts, understanding and selecting the fields to display, predicates to filter an extract, using string search, and top-down search for working with the unified log.
How it came about, what Apple’s goals were and their effect on the log contents, how it works, and an overview of the tools available to work with it.
macOS can update files protected by SIP without your knowledge of any update taking place, and without the event being recorded in the Install History. Here’s how it happens.
2017 was never going to be easy, and Apple had a lot of accidents over its closing months. It delivered a lot of new products, and with them a lot of new problems.
Found in some supplementary log files in Sierra only, and contain a UUID which may refer to main log files.
Found in supplementary log files in Sierra and High Sierra only. May contain a UUID reference to main log files.
Attached to log tracev3 files in High Sierra only. Contents and function not known.
So you think you know about iCloud Keychain? A careful exploration turns up some surprises, and suggests some good rules for troubleshooting.
If you have been trying to open Woodpile, but it has crashed each time, this update should allow it to run properly.
Why doesn’t High Sierra record the opening of keychains in the log, in the way that Sierra does? Has Apple abandoned the goals of its new unified log?