How to Gather Log Files for Mac Using the Console

Version 5

    Verified Product Versions

    Endpoint Manager 2017.xEndpoint Manager 2018.x

    Overview

    Ivanti Endpoint Manager (LANDesk) 2017.1 changes the way that Logging occurs on Managed Mac Devices:

     

    • The LANDESK.log no longer holds any relevant information on devices running MacOS 10.12 (Sierra) running an Ivanti 2017.1 Agent.
    • 2016.3 and older Agents are Unaffected.
    • OS X 10.11 (El Capitan) and older versions are Unaffected, even with a 2018.1 Agent installed.

     

    This is due to the new Unified Logging System provided by Apple. Previously, the majority of the Agent Activity was logged in the LANDesk.log, but some information ended up in the System.log or other logs. All logs are now in one place.

     

    Launching the Console

    Logs can be viewed in real time in MacOS using the Console. To begin, use the Spotlight Search utility:

    Spotlight.png

    Type Console into the Search bar and hit Enter. This will launch the Console.

    Console.png

    In the device list on the left, make sure the correct device is selected. This is typically only going to be one device, but other devices that are connected to the Mac may show up here.

     

    Logging Details

    Logging types are indicated by the color of the dot next to the Log message:

    Log Types.png

    No color next to the log just indicates default logging for that application

    Debug and Info Logs

    To enable Debug and Info messages, click Action in the Title Bar and select Include Info Messages and Include Debug Messages.

    Enable Debug.png

    View Details

    To view more detail on a particular log message, click the message and the details will populate in the bottom half of the console.

     

    Click the blue Details option for more information.

     

     

    For more information on using the Console, please visit this Apple Support Page on using the MacOS Console.

     

    Sorting Logs

    The Console Application makes it relatively simple to sort through and filter logs as needed. There are numerous way to do this.

     

    Searching

    The Console comes with a built-in search bar allowing the user to filter for specific inclusions, exclusions, processes, etc.

     

    After opening the Console, click in the Search bar in the top right and type in the desired keyword. For Example, type in Ldvdetect and hit Enter to see all activity from ldvdetect.

     

    After hitting Enter, a drop-down list labeled Any will appear next to the search. Clicking this will allow specification on what type of search is desired.

    Any.png

    More search items can be added to the search as well.

     

    Find

    Click anywhere in the Log Details area. Press Command + F to open the Find utility in the console.

     

    Type in the desired logging content and press Enter. The console will skip to the instance of the keyword added (if exists).

     

    Searching and Find can be used in conjunction to find more specific logging based on what is being searched for.

    Gathering Logs for Support

    Unfortunately, logs in the Console aren't much good to someone who isn't in the immediate vicinity. Fortunately, the ability to export logging information is available.

     

    Once the desired sort has been achieved, use the Command + A key combination to select all of the logging in the console. Once selected, use Command + C to copy the logs. Then open a Text Editor (Such as Text Edit) and paste the content into the editor.

     

    Save the Text File to a location and upload it to Support.