Sample Header Ad - 728x90

How does the TTL field work for Unified Logs?

0 votes
0 answers
168 views
Running log stats --overview yields the following summary of all the logs on a mac. Comparing the start and end timestamps to the lists of TTLs, I don't understand how these work together. If there are 43k logs with a TTL of 30 days, how does the start and end date of 8 days make sense? I cannot filter for the ttl field, which makes it more difficult to analyze this situation. enter image description here
Asked by Josh Brower (101 rep)
Aug 16, 2023, 08:54 PM