os log entry log
The OS Log Entry Log
inspector allows querying and filtering log entries from the local OS log store on macOS.
An object of this type provides most of the information otherwise available via the log entry types listed here.
If more than 1000 matching entries are found, only the most recent 1000 entries will be returned.
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Creation
Returns log entries from the macOS local OS log store, generated since the last system boot and filtered using the provided string.
The search string must be formatted as follows:
"processName;sensitivity;entry"
Where:
- "processName" is the name of the process to filter by.
- "sensitivity" can be "s" (case-sensitive and diacritics-sensitive), "c" (case-insensitive), "d" (diacritics-insensitive), or "cd" (case-insensitive and diacritics-insensitive).
- "entry" is part of the message to search within.
If more than 1000 matching entries are found, only the most recent 1000 will be returned.
- Q: exists search since boot "loginwindow;c;login state: " of local os log store
- A: True
- Q: number of searches since boot "loginwindow;c;login state: " of local os log store
- A: 17
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns log entries from the local OS log store, generated during the specified number of days before the current time and filtered using the provided string.
The search string must be formatted as follows:
"numberOfDays;processName;sensitivity;entry"
Where:
- "numberOfDays" is the number of past days to consider. Only entries from the last 99 days can be retrieved.
- "processName" is the name of the process to filter by.
- "sensitivity" can be "s" (case-sensitive and diacritics-sensitive), "c" (case-insensitive), "d" (diacritics-insensitive), or "cd" (case-insensitive and diacritics-insensitive).
- "entry" is part of the message to search within.
If more than 1000 matching entries are found, only the most recent 1000 will be returned.
- Q: exists search since days "1;loginwindow;c;login state: " of local os log store
- A: False
- Q: number of searches since days "40;loginwindow;c;login state: " of local os log store
- A: 17
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Properties
Returns an integer corresponding to the activity identifier associated with the specified OS log entry. This value can be used to correlate log entries generated within the same execution flow or by the same activity.
- Q: activity identifier of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: 0
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns the category associated with the specified OS log entry. This string represents the classification or type of event within the macOS logging system, helping to categorize events based on their nature or significance.
- Q: category of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: KeyMilestone
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns the composed message associated with the specified OS log entry. This string contains a detailed description or message generated by the process, providing context about the specific event or state, often including method names or key event data.
- Q: composed message of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: -[SessionStateMonitor setLoginState:] | ************ login state: LoginwindowUIShown
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns the log level associated with the specified OS log entry. This string indicates the severity or importance of the log message (e.g. Default, Debug, Info, Error), helping to filter and prioritize log data during analysis.
- Q: log level of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: Default
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns the process identifier (PID) associated with the specified OS log entry. This integer uniquely identifies the process that generated the log entry, allowing for tracking and correlation of events related to that specific process on macOS.
- Q: process identifier of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: 141
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns the name of the process associated with the specified OS log entry. This string indicates which process was active when the log entry was generated, providing insight into the application or system component involved in the event.
- Q: process name of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: loginwindow
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns the name of the sender associated with the specified OS log entry. This string indicates the name of the binary image that made the entry, providing insight into the origin of the event.
- Q: sender of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: loginwindow
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns the name of the subsystem associated with the specified OS log entry. This string identifies the subsystem or functional component within macOS that generated the log entry, providing insight into the area of the system involved in the event.
- Q: subsystem of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: com.apple.loginwindow.logging
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns the thread identifier (TID) associated with the specified OS log entry. This integer uniquely identifies the thread within the process that generated the log entry, helping to correlate events and track the execution flow at the thread level.
- Q: thread identifier of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: 789
Version | Platforms |
---|---|
11.0.5.0 | Mac |
Returns the timestamp representing exactly when the specified OS log entry was generated on the local macOS system. This includes the date, time, and time zone. This timestamp reflects the event's actual occurrence time on the system.
- Q: time generated of search since boot "loginwindow;s;login state: LoginwindowUIShown" of local os log store
- A: Tue, 03 Jun 2025 07:40:39 -0700
Version | Platforms |
---|---|
11.0.5.0 | Mac |