Filebeat on Mac - How to get unlocked workstation log?

I recently installed filebeat on a Mac and have enabled the auditd and system modules. I am wondering what log represents an unlocked screen or login success. Thanks.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.