MacOS – Show When Applications Were Opened and Closed

applicationsconsolemacosscript

I'd like to be able to see a list of applications that were recently opened and quitted on a per user basis.

Ex:

  • 19:25:34 Google Chrome Canary opened by John Smith
  • 20:45:32 Pages quitted by Julie Smith

I checked the Console, but it didn't seem to specifically detail when apps were opened/quitted and by whom; it only detailed the processes that errored in those applications.

Is there a way (eg. a script I can run) that will show all applications opened and quitted within a certain time frame, and by whom?

Best Answer

You can turn on auditing.

man audit