FSEventsParser
FSEventsParser copied to clipboard
[Question]: Location of .fseventd that contains the fsevents db on Big Sur
Hi there, apologize if this question is out of scope here.
-
But I am having trouble searching for .fseventd on macOS Big Sur. The suggested location at
/Volumes/Macintosh HD
does NOT seem to contain that directory. -
For node_id (inode number of each file) introduced in high sierra, I am wondering if you know whether the official apple core sdk provides a way to get this? Their callback that returns the events does not seem to have that option https://developer.apple.com/documentation/coreservices/fseventstreamcallback?language=objc#declaration Yet, your README indicates that the node_id exists on the fsevents log db.
Thanks.
- On Big Sur (11.6.2), I found the
.fseventsd
directory at/System/Volume/Data
- Yes you can receive the inode for each event. You have to specify the
kFSEventStreamCreateFlagUseExtendedData
flag when callingFSEventStreamCreate
. Then in your callback you get a dictionary containing inode and path for each event instead of just the path.
@sirnacnud appreciate it.