Question: The Appfirewall.log file is always empty. Do we have to disable SIP to get it to log?
While the log file appears in console and can be viewed from the Terminal commands, it is always empty.
Is SIP interrupting the logging? Hate to have to purchase other products to be able to view and record Firewall activity and if disabling SIP is the answer - it defeats its purpose... Been looking for an answer for months... Anybody?
iMac with Retina 5K display, macOS High Sierra (10.13.1)