Skip to main content

Apple Profile: System Logging

What

The System Logging profile in the FileWave web Profile Editor configures Apple's com.apple.system.logging payload for macOS devices. Use it to enablecontrol private data logging for the system orand define logging behavior for specific subsystems.subsystems, categories, and settings.

When/Why

Use this profile when diagnostics, audits, or compliance rules require more control over macOS logging. Enable privatePrivate data logging should be enabled only when your organization needs it,that additional detail, because it changes how much detailwhat macOS records in logs.

How

The macOS System Logging profile includes these settings:

settings

Keyand Features:controls:

  • Enable Private Data Logging: A checkbox to enable or disable private data logging for the entire system. Default is unchecked.

  • Subsystem Logging Configuration: A table for configuring logging behavior for specific subsystems. YouEach configuration uses a unique subsystem identifier and can addinclude newlogging configurationscategories with unique identifiersenable and set logging categories, enabling, and persistingpersist options.

  • Modal Configuration: When adding or editing subsystem logging configurations, you can specify:

    • Subsystem Identifier: A required, unique identifier.

    • Logging Categories: Add and configure categories with enable and persist options.

    • Additional Settings: Configure key-value pairs for each subsystem logging item.

  • Validation: The Save button is enabled only when all required fields are correctly filled. An empty profile cannot be saved.

  • Editing: Post-creation, you can edit the entire profile or individual subsystem logging configurations.

Apple documents the System Logging payload as available for macOS 10.12 and later.

Subsystem identifiers and logging categories help collect the logs you need without enabling extra logging everywhere. That keeps troubleshooting and audit review focused while still allowing deeper logging when a specific subsystem requires it.

image.png

Related Content

Digging Deeper

Subsystem identifiers and logging categories let you collect the logs you need without turning on extra noise everywhere. That keeps troubleshooting focused and makes audit review easier.

Back to top