I am trying to pick up AirDrop events with osquery. I can use the following command to produce events with the

show log

command but I cannot reproduce it with the asl table.

log  show --predicate 'subsystem == "com.apple.sharing" and category contains "AirDrop"' --start 2018-04-16 --info --style json