UNIFIED_LOG_EVENT

每小時會從UnifiedLogPredicates偏好設定鍵中的搜尋字串產生統一記錄檔結果。搜尋傳回的每個記錄檔項目都記錄為單獨的Compliance Reporter事件。如果統一記錄檔搜尋傳回五個結果,Compliance Reporter將分別記錄每個結果。

{
  "_event_score": 0,
  "event_attributes": {
    "activityIdentifier": 0,
    "backtrace": {
      "frames": [
        {
          "imageOffset": 80300,
          "imageUUID": "EDF984BE-EB9B-3EB5-9152-C98253AF3DB8"
        }
      ]
    },
    "category": "AHP",
    "eventMessage": "Returning value 1",
    "eventType": "logEvent",
    "formatString": "Returning value %d",
    "machTimestamp": 99527207361119,
    "messageType": "Info",
    "parentActivityIdentifier": 0,
    "processID": 928,
    "processImagePath": "/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp",
    "processImageUUID": "EDF984BE-EB9B-3EB5-9152-C98253AF3DB8",
    "senderImagePath": "/System/Library/Frameworks/CryptoTokenKit.framework/ctkahp.bundle/Contents/MacOS/ctkahp",
    "senderImageUUID": "EDF984BE-EB9B-3EB5-9152-C98253AF3DB8",
    "senderProgramCounter": 80300,
    "source": null,
    "subsystem": "com.apple.CryptoTokenKit",
    "threadID": 1305857,
    "timestamp": "2019-10-15 13:57:31.053209-0400",
    "timezoneName": "",
    "traceID": 501033738567940
  },
  "header": {
    "event_name": "UNIFIED_LOG_EVENT",
    "time_seconds_epoch": 1571163550
  },
  "host_info": {
    "host_name": "Dan_macbook_pro",
    "host_uuid": "3F6E4B3A-9285-4E7E-9A0C-C3B62DC379DF",
    "osversion": "Version 10.15 (Build 19A582a)",
    "primary_mac_address": "38:f9:e8:15:5a:82",
    "serial_number": "C03XY889JHG3"
  }
}