1

I try to get previous shutdown cause and when it happened but i don't know correct syntax.

syslog -k Sender kernel ???

I need to get date and time in start of the row and shutdown cause number in end of the row which can be negative number too.

3 Answers3

3

I usually just run

sudo grep "Previous shutdown cause" /var/log/system.log

or (if the above returns empty)

sudo zgrep "Previous shutdown cause" /var/log/system.log.*.gz
nohillside
  • 100,768
3

In Sierra, use log:

log show --predicate 'eventMessage CONTAINS "shutdown cause"'
nohillside
  • 100,768
0

You can run Console.app (e.g. from Launchpad) and in All messages and type shutdown cause in Search box, this will list all codes in a row.

After selecting multiple rows, they can be copied into the clipboard.

kenorb
  • 12,695