The log configuration page controls what type of information to record in the unit's different logs and where to send/store those logs.

Log entries are classified using "levels":
"emergency" - system is unusable
"alert" - action must be taken immediately
"critical" - critical conditions
"error" - error conditions
"warning" - warning conditions
"notice" - normal, but significant, condition
"info" - informational message
"debug" - debug-level message
You can select the recording level for most logs. Entries with the selected or higher levels are recorded into the logs, entries with lower levels are omitted, not recorded, to avoid clogging down the logs. The recommended log level for logs are "info".

NOTE! Press "Apply" after your settings!

System Log
The system log records generic events that have occurred to the unit.

Debug messages in system log - Include detailed information that might be useful for error tracing. Should normally be turned off - enable if support asks you to.

Internet filter: Log blocked access attempts - Log web access attempts blocked by the firewall's Internet filter into the system log.

Firewall Log
The firewall log records information about packets received and sent by the unit.
NOTE! Enabling the firewall log may affect performance/throughput of the unit, especially when logging all packets and/or extensive details about each packet.
At peak load, some packets may be left out from the log.

Log settings
Firewall Log - Select the extent of the firewall log:
  off - no packets are logged.
  Show rejected packets - only those packets that have been rejected by the firewall are logged.
  Show all packets - ALL packets that the firewall sees are logged.
Verbosity level - The amount of information presented for each packet. Select a higher value for more information in the log output.
Include link layer information - For example Ethernet headers.
Log raw data - Include contents of the packets (in hex or ASCII form) into the firewall log. Up to 64 first bytes can be logged.
Exclude protocol headers - Do not include IP/TCP/UDP headers into the logged raw data.
Log UDP multicast packets - Include multicasted UDP data packets into the firewall log. Normally disabled to avoid clogging down the log.

SIP Log
The SIP log records SIP and telephony related events.

Verbosity level - Select the amount of information recorded to the SIP log. Log messages with the selected level and higher are recorded.
Mediastream log level - Select the level all log messages related to media streams shall be logged at. If the level is equal to or greater than Verbosity level the media stream log messages will be shown in SIP log.
Log SIP header fields - Enter the name of the SIP header fields (e.g. From, To) you want to record into the SIP Log (Verbosity level has to be "info" or "debug" to use this feature). '*' can be used to record the complete SIP message with all headers.
Log SIP methods - Filter logging of SIP messages by method. If the word "not" is prepended all SIP messages that not matches the methods listed will be logged. Examples: "not REGISTER" or "INVITE ACK BYE CANCEL".
Log only communication with IP addresses - Filter the logging of SIP messages. Only SIP messages sent or received to the given IP addresses are recorded into the SIP Log.
Log internal SIP messages - SIP messages may be sent to/from internal applications of the box, with this setting enabled all messages will be logged. When disabled only message sent out or received from the network will be shown.
Log telephone port calls - Log start and finish of telephony port calls.
Telephone ports debug messages - Enable logging of debug information about telephony port events. Mainly for support matters.

VPN Log
The VPN log records Virtual Private Network events. Visible only if VPN licence is installed into the unit.

IPSec Log settings - Select the amount of information recorded to the VPN log. Log messages with the selected level and higher are recorded.

Call Log
The call log records information about SIP calls made through the unit.

Call detail recording level - Select the amount of information recorded for each call:
  Off - No information is logged.
  Basic - Information about call participants, duration, termination reason, etc is recorded.
  Including media statistics - Calculate and store information about voice quality too.
Log local calls too - Log information about local calls (made between LAN phones) too. (Same as setting "Always record route" on SIP advanced page.)

Save to file
Current contents of all logs are saved to a file on your PC.
Save to file - click to save a snapshot of all logs to a single file on your own PC. Support might require you to click this button and e-mail the resulting file to them.

Forward to syslog server
All log entries can be forwarded to a remote syslog server.

Primary syslog server - Enter the IP address of the syslog server all log entries will be sent to.
The system log is always forwarded to this syslog server.

Firewall Log
The firewall log can also be forwarded to the primary syslog server specified above.
Forward firewall log to primary syslog server - Enable this to forward all firewall log entries to the primary syslog server. You must set "Firewall Log" above to other than "off" to collect firewall log entries, to be able to forward them to the syslog server.
WARNING! This setting generates one extra packet of data traffic for each and every packet received or sent by this unit! This not only reduces performance/bandwidth of this unit but your entire network! Use with extreme care!
Do not forward ACCEPT log entries - To reduce network traffic you can set "Firewall Log" above to "Show all packets", enable "Forward firewall log to primary syslog server" and enable this setting. Then all sent/received packets will be logged in the unit's internal firewall log, but only ERROR/DROP/DENY entries will be forwarded to the syslog server.

SIP Log
The SIP log can be forwarded to the primary syslog server, or to some other syslog server.
Forward to syslog server - Enable to forward all SIP log entries to a syslog server. If the IP Address field is left empty the entries will be forwarded to the primary syslog server specified above, otherwise the entries will be forwarded to the specified syslog server address.

Call Log
The call log can be forwarded to the primary syslog server, or to some other syslog server.
Forward to syslog server - Enable to forward all call log entries to a syslog server. If the IP Address field is left empty the entries will be forwarded to the primary syslog server specified above, otherwise the entries will be forwarded to the specified syslog server address.

Forward to SNMP server
Log entries can be forwarded, embedded in SNMP traps, to a remote SNMP server.

Send SNMP trap to - Enter the community and IP address of the SNMP server the traps will be sent to. Both fields must be nonempty to activate SNMP trap send.

Generate SNMP trap for log level - Limit the amount of log messages sent to the SNMP server. Only log entries with the selected or more severe severity levels are forwarded to the SNMP server.