Skip to content

Instantly share code, notes, and snippets.

@m0zgen
Last active June 1, 2025 10:29
Show Gist options
  • Save m0zgen/e8418e9d399de54ae4acdd47f7c19f6a to your computer and use it in GitHub Desktop.
Save m0zgen/e8418e9d399de54ae4acdd47f7c19f6a to your computer and use it in GitHub Desktop.
## Syscalls
```
sudo syscallbypid.d
```
## FS Usage
```
sudo fs_usage
```
## Syslog view
```
/usr/bin/log show --last 10s --style compact
```
## Syslog filtering
```
/usr/bin/log show --last 10s --style compact --predicate 'messageType == error'
```
## Setup syslogd level threshold
1. `sudo nano /etc/asl.conf`
2. Change `notice` to `error` - `? [<= Level error] file system.log`
Before:
```
# Rules for /var/log/system.log
> system.log mode=0640 format=bsd rotate=seq compress file_max=5M all_max=50M
? [= Sender kernel] file system.log
? [<= Level notice] file system.log
? [= Facility auth] [<= Level info] file system.log
? [= Facility authpriv] [<= Level info] file system.log
```
After:
```
# Rules for /var/log/system.log
> system.log mode=0640 format=bsd rotate=seq compress file_max=5M all_max=50M
? [= Sender kernel] file system.log
? [<= Level error] file system.log
? [= Facility auth] [<= Level info] file system.log
? [= Facility authpriv] [<= Level info] file system.log
```
## See error IP details
```
security error -67062
```
## Additional
`tccutil`, reset SMC (for Intel chip follow T2 instructions):
- https://support.apple.com/en-us/102605
Reset NVRAM:
- https://support.apple.com/en-us/102539
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment