view login instances

Question

Level 1

4 points

view login instances

Mac running Sonoma 14.0. Looking to see any activity on my Mac for a date last month. Want to see login, etc. I was not home at the time but I know some of my data was accessed.

iMac 27″, macOS 14.0

Posted on Oct 14, 2023 5:55 PM

Reply

Answer 1

MartinR

Level 7

25,606 points

Oct 14, 2023 7:12 PM in response to Bob_A_Booey

Open Terminal and use the command last which will show you all login activity in reverse chron order. It may go back a year or more. Use the command man last to see details about the last command.

Also, see View log messages in Console on Mac - Apple Support but there is so much detail in each log report it will be very difficult to find anything.

Reply

Answer 2

MartinR

Level 7

25,606 points

Oct 15, 2023 10:05 AM in response to Bob_A_Booey

When I run last, I can see logins going back an entire year.

Did you run it in an admin account or a user account? If user, try running it in an admin account.

Reply

Answer 3

Bob_A_Booey Author

Level 1

4 points

Oct 15, 2023 8:12 AM in response to MartinR

thanks for the reply but I'm only seeing back to yesterday when using the last command. I have a specific range of dates I want to view login activity for but I guess I can't enter that in a command?

Reply

Answer 4

Bob_A_Booey Author

Level 1

4 points

Oct 15, 2023 11:48 AM in response to MartinR

ran within my own admin account

Reply