pymobiledevice3 syslog

Watch syslog messages

live-old

view live syslog lines in raw bytes form from old relay

pymobiledevice3 syslog live-old [OPTIONS]

Options:

Option	Description
--native	macOS only: reach the iOS 17+ tunnel by piggybacking Apple's own remoted tunnel via the remotepairingd service. NO root, no entitlement, no Xcode, and remoted is left running (so it coexists with Xcode/devicectl). Rides Apple's kernel-routable tunnel, so throughput matches the kernel tunnel. Mutually exclusive with --rsd/--tunnel/--userspace. [env var: PYMOBILEDEVICE3_NATIVE]

Accepts the connection options: --rsd, --tunnel, --userspace, --mobdev2, --usbmux, --udid.

live

view live syslog lines

pymobiledevice3 syslog live [OPTIONS]

Options:

Option	Description
--native	macOS only: reach the iOS 17+ tunnel by piggybacking Apple's own remoted tunnel via the remotepairingd service. NO root, no entitlement, no Xcode, and remoted is left running (so it coexists with Xcode/devicectl). Rides Apple's kernel-routable tunnel, so throughput matches the kernel tunnel. Mutually exclusive with --rsd/--tunnel/--userspace. [env var: PYMOBILEDEVICE3_NATIVE]
-o, --out <path>	Save every log entry to this file. NOTE: stdout is not suppressed — entries are printed to both stdout and the file (tee-like). Redirect stdout with '>/dev/null' to keep only the file.
--pid <int>	pid to filter. -1 for all [default: -1]
-pn, --process-name <str>	process name to filter
-m, --match <str>	filter only logs matching this expression (repeatable; all must match - conjunction).
-v, --invert-match <str>	filter only logs not matching this expression (repeatable; any match excludes - disjunction).
-mi, --match-insensitive <str>	filter only logs matching this expression, case-insensitively (repeatable; all must match - conjunction).
-vi, --invert-match-insensitive <str>	filter only logs not matching this expression, case-insensitively (repeatable; any match excludes - disjunction).
--label	Include the subsystem/category label in the rendered line (JSON output always emits the label field).
-e, --regex <str>	filter only lines matching given regex (repeatable; any match includes - disjunction).
-ei, --insensitive-regex <str>	filter only lines matching given regex, case-insensitively (repeatable; any match includes - disjunction).
-s, --subsystem <str>	keep only entries whose os_log subsystem matches this case-insensitive glob (e.g. 'com.apple.WebKit*'). Repeatable; an entry is kept if it matches any (disjunction). Entries with no subsystem/category label are dropped when set.
-c, --category <str>	keep only entries whose os_log category matches this case-insensitive glob (e.g. 'Network'). Repeatable; an entry is kept if it matches any (disjunction). Combined with --subsystem as a conjunction (both must match).
-io, --image-offset	Include image offset in log line (text mode only; JSON always emits image_offset).
--no-debug	Suppress DEBUG entries.
--no-info	Suppress INFO entries.
--start-after <str>	Start printing only after this string is seen.
--format <text\|json>	Output format. 'json' emits one JSON object per line (NDJSON). Filters match against the rendered text line in both formats. [default: text]

Accepts the connection options: --rsd, --tunnel, --userspace, --mobdev2, --usbmux, --udid.

collect

Collect the system logs into a .logarchive that can be viewed later with tools such as log or Console. If the filename doesn't exist, system_logs.logarchive will be created in the given directory.

pymobiledevice3 syslog collect [OPTIONS] {out}

Arguments:

Argument	Description
out	[required]

Options:

Option	Description
--native	macOS only: reach the iOS 17+ tunnel by piggybacking Apple's own remoted tunnel via the remotepairingd service. NO root, no entitlement, no Xcode, and remoted is left running (so it coexists with Xcode/devicectl). Rides Apple's kernel-routable tunnel, so throughput matches the kernel tunnel. Mutually exclusive with --rsd/--tunnel/--userspace. [env var: PYMOBILEDEVICE3_NATIVE]
--size-limit <int>	Maximum size in bytes of logarchive
--age-limit <int>	Maximum age in days
--start-time <int>	Start time of logarchive as a unix timestamp

Accepts the connection options: --rsd, --tunnel, --userspace, --mobdev2, --usbmux, --udid.