How to figure out the login activity on my imac

Discussion in 'iMac' started by renzocataldo, Jun 30, 2016.

  1. renzocataldo macrumors newbie

    Joined:
    Jun 30, 2016
    Location:
    Scottsdale
    #1
    Hi everybody,
    I would like to know the details of the login activity of my imac. I tried going into Applications/Utilities/Console. I looked at system.log but it only gave me info for today. Possibly very naiive question. If I run a disk utility/first aid, will the system.log be erased? If so, retrievable?
    thanks
    Renzo
     
  2. slayerizer macrumors 6502a

    slayerizer

    Joined:
    Nov 9, 2012
    Location:
    Canada
    #2
    the logs are stored in the folder /var/log/ and there is a logrotate process that compress the current log and rename it, this also create a new log file. My system.log get rotated every 2 days on my macbook.

    You should see :
    Code:
    system.log
    system.log.0.gz   
    system.log.1.gz 
    system.log.2.gz 
    system.log.3.gz  
    system.log is the current one, then .0.gz and the oldest one is your biggest number. Your system will keep X amount of each log but there will be a rotation, so you may have up to a week or more of data.

    if you grab a copy of your logs files, you could uncompress them in another folder and inspect the log
     
  3. kryten2 macrumors 6502a

    Joined:
    Mar 17, 2012
    Location:
    Belgium
  4. slayerizer macrumors 6502a

    slayerizer

    Joined:
    Nov 9, 2012
    Location:
    Canada
    #4
  5. kryten2 macrumors 6502a

    Joined:
    Mar 17, 2012
    Location:
    Belgium
    #5
    No, I didn't. I made the same mistake. I admit the man page for OS X version 10.9 might seem confusing but it clearly states -n Limits the report to n lines. Notice that the -n isn't bold.

    Code:
    Billys-Mac-Pro:~ kryten$ last -n20
    last: illegal option -- n
    usage: last [-#] [-t tty] [-h hostname] [user ...]
    
    Note : I'm using Mavericks.
     
  6. slayerizer macrumors 6502a

    slayerizer

    Joined:
    Nov 9, 2012
    Location:
    Canada
    #6
    ok.. I checked the linux version and the -n was required. There also a ton of other arguments for
    linux. Well the -n limit the lines like OSX but you can specify a date with:

    -s, --since time

    :)

    again, this is linux, do not attempt on OSX! :rolleyes::p
     
  7. renzocataldo thread starter macrumors newbie

    Joined:
    Jun 30, 2016
    Location:
    Scottsdale
    #7

Share This Page