Frequently Asked Questions
Show macOS VNC login attempts
macOS 10.12 introduced ‘unified logging’ with the ‘log show’ command, so VNC (Screen SHaring) login attempts are not stored in /var/log/system.log any more. Use the following commands in Terminal to display recent login attempts.
Show successful VNC logins:
log show | egrep screensharingd | egrep SUCCEEDED