1 log location · macOS
Kandji Agent logs to log show --predicate 'subsystem beginsWith "io.kandji"' on macOS.
Paths are printed exactly as Kandji Agent writes them. Environment variables like %LOCALAPPDATA% and $XDG_STATE_HOME are never expanded, so a path can be pasted straight into a shell. Where a path differs between installer types or shipping flavours, each one is racked as its own card below - why that happens.
Finding your way around macOS.
log show --predicate 'subsystem beginsWith "io.kandji"'- `sudo kandji logs --last <seconds>` wraps this.