When searching the the unified system log on macOS using predicates, it’s often useful to use logging subsystems when searching for information. For example, as part of a previous post on finding DDM status information in the logs, I used the following command to find data logged within the last ten minutes:

This search uses the com.apple.remotemanagementd subsystem as a predicate when searching the logs. However, you can get even more granular by searching for a specific category of information within the com.apple.remotemanagementd subsystem. For example, let’s look at the data returned from running the command above:

Within the data returned by searching for the com.apple.remotemanagementd subsystem, there’s several categories included as part of the subsystem log entries:

• XPCListenerDelegate
• client
• mdmConduit

Those categories show up following the listing for the com.apple.remotemanagementd subsystem in the returned log entries like this:

If we wanted to get more granular and search the unified system log for only the logs associated with a particular category for a logging subsystem from the last ten minutes, the following command could be used to search using the following predicates:

• Subsystem: com.apple.remotemanagementd
• Category: mdmConduit

That would return only those log entries which matched both the com.apple.remotemanagementd subsystem and the mdmConduit category: