Sierra’s Unified Log Evolves
When I assessed this in March 2017, the default period for which log entries remained, appeared to be determined by log size, and amounted to several days.
In Sierra 10.12.6, the current period is about 20 days, possibly even more.
The present structure of log files is also quite different from early releases of Sierra.
Previously: Logs Unite: Forensic Analysis of Apple Unified Logs, macOS 10.12.4 Locks Console Log Away From Normal Users.
