Answer the question
In order to leave comments, you need to log in
How to view login history on mac os?
All the best! Tell me, is it possible to somehow see the login / login history on a mac computer?
I want to see if no one has used my computer.
I found some commands:
log show --style syslog --last 30d --predicate 'eventMessage CONTAINS "unlockUIBecomesActive"' --info
Filtering the log data using "composedMessage CONTAINS "unlockUIBecomesActive""
Skipping debug messages, pass --debug to include.
Timestamp (process)[PID]
2021-08-11 11:14:32.125052+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive]_block_invoke | after dispatch, show status controller
2021-08-11 15:48:06.381452+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive] | Enter. Setting CGSSetSecureEventInput
2021-08-11 15:48:06.381469+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive] | Setting CGSSetSecureEventInput
2021-08-11 15:48:06.381509+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive] | resume status controller
2021-08-11 15:48:06.493075+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive]_block_invoke | after dispatch, show status controller
2021-08-12 14:28:35.302934+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive] | Enter. Setting CGSSetSecureEventInput
2021-08-12 14:28:35.302949+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive] | Setting CGSSetSecureEventInput
2021-08-12 14:28:35.302992+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive] | resume status controller
2021-08-12 14:28:35.452561+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive]_block_invoke | after dispatch, show status controller
2021-08-12 14:48:49.315446+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive] | Enter. Setting CGSSetSecureEventInput
2021-08-12 14:48:49.315447+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive] | Setting CGSSetSecureEventInput
2021-08-12 14:48:49.315462+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive] | resume status controller
2021-08-12 14:48:49.735050+0300 localhost loginwindow[139]: [com.apple.loginwindow.logging:Standard] -[LWDefaultScreenLockUI unlockUIBecomesActive]_block_invoke | after dispatch, show status controller
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question