log show: --last 1m command ignored

Hi all


Wondering if anyone else has experienced this. Running MacOS Sierra 10.12.6 (16G29)


In Terminal, when I issue the log show --last 1m command, I get all log entries from the beginning of the month, as opposed to the last 1 minute.


I get the same output if I include --start and --end dates/times - all log entries starting oldest first.


It does not make a difference whether I include --predicate, --style, --info, --debug


Anyone else experienced this please? What am I doing wrong?


Thanks


James


E.G.

MacBookPro:~ user$ log show --style syslog --info --last 1m

Skipping debug messages, pass --debug to include.

Timestamp (process)[PID]

2017-07-01 07:23:39.000000+1000 localhost timesync: === system boot: F9C43253-68AE-4750-B79B-60145EB14C4E

2017-07-01 07:23:40.790269+1000 localhost logind[102]: (logind) Created Activity ID: 0x8000000000000080, Description: Loading Preferences From System CFPrefsD For Search List

2017-07-01 07:23:40.841874+1000 localhost logind[102]: (loginsupport) logind started

2017-07-01 07:23:40.916951+1000 localhost cfprefsd[116]: (cfprefsd) Created Activity ID: 0x8000000000000170, Parent ID: 0x8000000000000161, Description: rejecting read of { %{public}s, %{public}s, %{public}s, %{public}s, managed: %d } from process %{public}d because %{public}s

================================================================================ ================================================================================ ================================================================================ ==========================================

MacBookPro:~ user$ log show --style syslog --info --start 2017-07-25 --end 2017-07-25

Skipping debug messages, pass --debug to include.


Timestamp (process)[PID]

2017-07-01 07:23:39.000000+1000 localhost timesync: === system boot: F9C43253-68AE-4750-B79B-60145EB14C4E

2017-07-01 07:23:40.790269+1000 localhost logind[102]: (logind) Created Activity ID: 0x8000000000000080, Description: Loading Preferences From System CFPrefsD For Search List

2017-07-01 07:23:40.841874+1000 localhost logind[102]: (loginsupport) logind started

2017-07-01 07:23:40.916951+1000 localhost cfprefsd[116]: (cfprefsd) Created Activity ID: 0x8000000000000170, Parent ID: 0x8000000000000161, Description: rejecting read of { %{public}s, %{public}s, %{public}s, %{public}s, managed: %d } from process %{public}d because %{public}s

2017-07-01 07:23:41.166364+1000 localhost mtmfs[78]: (mtmfs) Created Activity ID: 0x8000000000000260, Description: Loading Preferences From System CFPrefsD For Search List

2017-07-01 07:23:41.176445+1000 localhost mtmfs[78]: (mtmfs) Created Activity ID: 0x8000000000000261, Description: Loading Preferences From System CFPrefsD For Search List

2017-07-01 07:23:41.305136+1000 localhost corebrightnessd[107]: Brightness system started

2017-07-01 07:23:41.305552+1000 localhost corebrightnessd[107]: (CoreBrightness) Using default queue

MacBook Pro TouchBar and Touch ID, macOS Sierra (10.12.6)

Posted on Jul 24, 2017 6:29 PM

Reply
3 replies

Nov 19, 2017 1:35 AM in response to jwloader

I'm seeing the same thing


log show --style syslog --info --last 1m


or any other time specified always gives me output starting from 2017-08-19 (the oldest message in the log archive:


Timestamp (process)[PID]

2017-08-19 23:46:41.000000+1000 localhost timesync: === system boot: 360A959B-A37F-4EB6-A08B-63B3A06FA52E

2017-08-19 23:46:43.921110+1000 localhost powerd[66]: (IOKit) [com.apple.iohid.default] Unable to open 0xfffffecc

2017-08-19 23:46:43.921377+1000 localhost powerd[66]: (IOKit) [com.apple.iohid.default] IOHIDEventSystemServer died. Reestablishing connection.

2017-08-19 23:46:43.964303+1000 localhost hidd[121]: (IOKit) [com.apple.iohid.default] IOHIDService compatibility thread running at priority 63 and schedule 2.


I'm on macOS High Sierra 10.13.1


The log command doesn't seem to provide a version, but here's the MD5 in case there's multiple versions:


% md5 /usr/bin/log

MD5 (/usr/bin/log) = 6802952cec78837ce3d6d62ad6567625

Jul 24, 2017 6:46 PM in response to jwloader

That's odd. I'm using that same exact macOS build and log show --style syslog --info --last 1m provided log entries only for the previous minute.


--last time [m|h|d]

Shows events that occurred within the given time relative to the end of the log archive. Time may be specified as minutes, hours or days. Time is assumed in seconds unless specified. Example: "--last 2m" or "--last 3h"


Values expressed in months are notably absent from that description. You are not doing anything wrong. It should work the way you expect.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

log show: --last 1m command ignored

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.