Diagnostics: Console

Question 1

What type of log messsage appears without a colored dot in the “Type” column?

Answer 1

Default messages

Question 2

What type of Console log messages are marked with a RED dot in the “Type” column?

Answer 2

Faults

Question 3

What type of Console log messages are marked with a YELLOW dot in the “Type” column?

Answer 3

Errors

Yellow dots mark error messages that are important, but not critical

Question 4

What type of Console log messages are marked with a DARK GRAY dot in the “Type” column?

Answer 4

Debug

Question 5

What type of Console log messages are marked with a LIGHT GRAY dot in the “Type” column?

Answer 5

Info.

Question 6

What type of Console log messages are marked WITHOUT A dot in the “Type” column?

Answer 6

Default log messages

Question 7

In Console, what button do you click to begin viewing log messages?

Answer 7

“Start Streaming”

Question 8

What should you do to prepare your Mac for a Console logging session?

Answer 8

Connect it to a power source (message streaming is battery intensive) and close non-critical apps.

Question 9

What is the quickest way to filter log messages containing mentions of a specific string?

Answer 9

Type the string in the Search field, then press Return.

Note that this searches for any log message containing the search string, and not just the Application you may have typed in the search field.

Question 10

How do you refine log messages search results for a specific app?

Answer 10

Click the arrow beside “Any” in the search field and from the pop-up menu, choose “Process”.

Only log messages specific to the Process now appear.

Question 11

How to do you view Log Reports on Console?

Answer 11

Click on “Log Reports” in the sidebar.

System and user-related log files appear.

Question 12

Which log file contains messages related to macOS installation, software updates, and the Installer app (PKG files)?

Answer 12

install.log

Question 13

What type of user is required to view System log files and Log Reports?

Answer 13

System log files and reports are available only to Administrator accounts.

Standard accounts can access only logs and reports that belong to them.

Question 14

What button do you click to stop the streaming of log messages?

Answer 14

Click the “Pause” button

Question 15

What are the five different levels of log messages

Answer 15

Fault
Error
Default
Info
Debug

Question 16

How can you view only messages related to Errors and Faults?

Answer 16

Click the “Start” button to start message streaming, then click on “Errors and Faults” in the Favorites bar at the top of the messages window (next to the “All Messages” button)

From the list of log messages, click a fault message, then review the log details.

If the log details don’t appear, click the Info button in the toolbar.

Question 17

What Terminal command allows you to emulate quitting an application while also generating a crash report?

Answer 17

killall -3 ProcessName

Or if you know the process ID:

killall -3 pid

Question 18

How do you view crash reports in Console?

Answer 18

Click on Crash Reports in the Console sidebar.

Question 19

What are the differences between the two sections of a crash report?

Answer 19

A crash report contains two sections: a translated report most users can easily understand and a full report that contains raw data that’s helpful to developers and Apple.

Question 20

In Console, how do you group log messages by the system activity they’re associated with?

Answer 20

Click the “Activities” button on the Console’s main toolbar.

(If the Activities button is dimmed, click Start in the toolbar.)

Select the activity.

Log messages for that activity appear at the bottom of the window.

Question 21

How do you view child activities within a specific Activity?

Answer 21

Click the Expand button (+) next to the activity.

Question 22

What are the 6 types of Reports that you can view using Console?

Answer 22

1. Crash Reports: System and user reports about apps or processes that crash. Crash report names have the .ips extension.
2. Spin Reports: System and user reports with details about app or process issues. Spin report names have a .spin extension.
3. Log Reports: System and user reports with information about events that occur when the system or specific apps are processing. Log report names have an extension such as .log, ._log, or .its.
4. Diagnostic Reports: System and user reports with information about hardware resources, system response times, and more. Diagnostic report names have an extension such as .diag or .dpsub.
5. Mac Analytics Data: Contents of the Message Tracer Store data found at /var/log/DiagnosticMessages.
6. system.log: Contents of the legacy system log file at /private/var/log/system.log.

Question 23

How do you view ALL details of an Activity?

Answer 23

Click Details in the activity details in the lower half of the Console window.

If you don’t see the activity details, click the Info button in the toolbar

Question 24

How do you search log messages for a specific device, instead of globally?

Answer 24

Select the device in the Console sidebar before you start a search.

Question 25

How do you hide a specific property from the message log output?

Answer 25

1. Right-click (or control-click) a log messages or Activity 2. In the contextual menu, select the specific property to hide/show (such as a Process, Thread ID, or Message Type). 3. After you select an option, it’s added to the **Search** field, and the search results are updated with the log messages or activities that fit the search criteria

Question 26

How can you add multiple search filters to a log messages search?

Answer 26

1. Change which property to search: Click the arrow next to a search filter, then choose a property. For example, search within the process or the message. 2. Place the pointer after the first filter, start typing search text, press Return, then change the search filter if desired. Repeat as needed; the search field scrolls as you add more filters.

Question 28

How do you *exclude* search terms for a Property from the Console log messages view?

Answer 28

1. Click the down-arrow on the existing search filter property 2. Then select either “Does not contain” or “Does not equal” at the bottom of the contextual menu.

Question 29

Other than clicking on the down-arrow in a Search Filter, what’s a faster way to define what properties to search for in the console logs, and particularly multiple search properties?

Answer 29

Use *Property Shortcuts*. For example, to limit your search to specific Processes, eg Safari,, you can type “p: Safari”, or “process: Safari” Reference: https://support.apple.com/guide/console/use-property-shortcuts-cnsl707fe51a/mac

Question 30

What’s a method of reducing the effort of executing frequently repeated search criteria in the Console logs?

Answer 30

Use a *Saved Search*. 1. Click Save below the search field. 2. Enter a name for the search. 3. Click Save. The saved search appears in the **Favorites** bar. To remove the Saved Search, right-click on its name in the Favorites bar.

Question 31

How do you configure Console to always scroll to show the most recent messages?

Answer 31

Click the *Now* button in the toolbar (looks like an arrow pointing upwards and to the left) OR choose *Action > Enable Now Mode*. The log messages automatically scroll to always show the most recent message. NOTE: The Now button isn’t available if you’re browsing a log archive—it’s only available when you’re viewing the live stream of log messages.

Question 32

How do you show previously hidden messages or activities?

Answer 32

Click the Reload button in the toolbar. OR select *Action > Reload* from the Console menu

Question 33

How do you enable/disable *Info* and *Debug* messages from appearing in the message log view?

Answer 33

From the Console menu, select either: *Action > Include Info Messages* *Action > Include Debug Messages* Note: These options are only available in the Console live stream and aren’t available when you’re browsing a log archive, because info and debug log messages are automatically included in a log archive.