71854: How to Collect Full Unified System Logs on Mac Machines

Last update: 08-03-2023


Since the introduction of Unified System Logs (USL) on macOS, Acronis Agent and SysInfo Gatherer are unable to trace extended system logs. Because of this, crucial information is sometimes omitted from the system report.

In cases where extended system logs can be useful for both the support and the developers, collecting the full logs via USL could greatly help with investigations. In this article, we will go over two methods of collecting full Unified System Logs on macOS.

Method 1

Follow the steps below to collect USL system logs via the Console App:

  • Go to Applications > Utilities  and open the Console App.
  • Click on Start streaming.
  • Reproduce the issue.
  • Click on Pause.
  • Select one entry, then press CMD+A to select the rest.
  • Click on the Share icon in the upper-right side of the window.
  • Select one of the apps, such as Mail.
  • Select all the text and copy it to a text editor of your choice.
  • From the text editor, save all the text to a plain-text file and save the file as a zip archive.

Method 2

Follow the steps below to collect USL system logs via the command line:

Note: Due to its simplicity and speed, this is the recommended method of collecting USL system logs.
  • Access the machine and open a terminal window.
  • Type sudo log stream > ~/Desktop/log_stream1.log and press Enter. You will be prompted for the administrator password.
  • Immediately after starting the log stream, reproduce the issue in question.
  • As soon as the issue is reproduced, bring up the terminal and press CTRL+C (not CMD+C).
  • Once you have the log file (in this example, log_stream1.log), save it as a zip archive.