I am having difficulties with the output of log show macOS Sierra 10.12.4 (currently still the Beta builds). The timezone seems to be off. Like way off what it should be.
I checked my date and time settings, and they are fine. Maybe not for the log show command, but the data and time – think clock – is fine. It also still works, on the same computer, with macOS Sierra 10.12.3
So. Is it just me or are you also experiencing the same kind of errors with 10.12.4?
Please try this terminal command:
log show --predicate 'process == "kernel"' --start "2017-03-01 14:05:56"
Note: Adjust the timestamp with: date -v -15M “+%Y-%m-%d %H:%M:%S” to get the last 15 minutes. Or anything else that works for you.
The above example shows some output here. With timestamp starting at 2017-03-01 14:05:56.456555+0000 but there are also lines with a future time. How is that even possible?
The console app is fine. It’s just the output of log show that is broken.
The next command should show events of the last 3 minutes. But no. Also broken:
log show --last 3m
Edit: I ran sudo log erase -all and still see events from 2017-02-27 and 2017-02-28. Erase isn’t working like it is supposed to work.
I also triggered an error and the Console.app showed the error with a timestamp of: 2017-03-01 10:35:56.944816 but the log show command shows the same error with: 2017-02-27 19:57:52.590919+0100