Exercise 2: Unified Logging vs. Event Viewer's Channels — Possible Solution
====================================================================

WHICH USES SEPARATE CATEGORIZED CHANNELS
------------------------------
Windows 11's Event Viewer (Windows 11 Troubleshooting & Administration 2) organizes logs into separate, distinct channels - Application, System, Security, and more - each queried and browsed on its own, independently of the others.

WHICH USES A SINGLE QUERYABLE STORE
------------------------------
macOS's Console.app, built on the unified logging system introduced in Sierra (10.12), keeps one single, system-wide log store instead of separate channels. Rather than browsing a specific category, it's queried across everything at once using predicates, such as `log show --predicate 'eventMessage contains "error"' --last 1h`, which searches across the whole unified log rather than one designated channel.

WHY THIS WORKS AS AN ANSWER
------------------------------
It correctly identifies Event Viewer as using separate categorized channels and Console.app/unified logging as using one single queryable store, matching the structural distinction this chapter draws between the two diagnostic approaches, both of which are aimed at the identical underlying goal of finding what happened and when.