It does record keyboard wakes. Perhaps the computer wasn't asleep at
that point, only had its display sleeping.
The precise details will vary between models, but I get entries like
these (trimmed slightly) on my MacBook Pro (Retina, Late 2013):
Apr 2 13:20:22 kernel[0] <Notice>: Wake reason: EC.LidOpen (User)
Apr 2 13:48:00 kernel[0] <Notice>: Wake reason: XHC1
The "EC.LidOpen (User)" entry is obvious.
The "XHC1" entry was caused by doing a test by pressing a key on an
external USB keyboard to wake up the computer while the lid was already
open and I had manually put it to sleep. I got the same reason in other
tests using the built-in keyboard or trackpad to wake up the computer
(as long as I leave it asleep long enough - less than about fifteen
seconds and it isn't reported as a wake so presumably hadn't gone to
sleep yet).
For reference, "EHCI" and "XHCI" are two versions of the USB controller.
EHCI supports up to USB 2, XCHI supports up to USB 3. I assume the
number indicates the specific controller which woke up the computer, in
cases where the computer has more than one USB controller.
I also have entries which mention these reasons in the last few days.
EC.ACAttach (Maintenance) - plugging in power, judging by the times.
EC.ACDetach (Maintenance) - unplugged power while sleeping?
EC.DarkPME (Maintenance) - that will be "dark wake", triggered by
something like Wake on LAN but the computer didn't fully wake up. For
recent models it might also be the Power Nap feature waking up to do
some work while the computer is nominally asleep.
EC.LidClose (Maintenance) - presumably the computer stayed awake or woke
up again when I closed the lid to do some maintenance before going to
sleep again?
RTC (Alarm) - real time clock alarm, but not sure why as I don't have
any scheduled wakes configured on this computer, and the time wasn't
close to a minute boundary so unlikely to be a calendar/reminder alert.
--
David Empson
dem...@actrix.gen.nz