---
title: "Configuring Logging"
slug: "configuring-logging-5-1-1"
tags: ["7.11", "Edge Filer", "Gateway", "Filer"]
updated: 2025-11-04T11:05:50Z
published: 2025-11-04T11:05:50Z
canonical: "kb.ctera.com/configuring-logging-5-1-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.ctera.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring Logging

**To configure log settings:**

1. In the **Configuration** view,  in the navigation pane:  

Either, select **Logs > Log Settings**,  

or, select **Logs > Log Viewer** and click **Settings**.  

The **Log Settings** page is displayed.  

![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-6UE703EX.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A27%3A34Z&se=2026-11-11T05%3A27%3A34Z&sr=c&sp=r&sig=OJdFPIwF%2Bq2pdGot6OEXZhkFWo5HxunnLe%2BWH%2BkRIK0%3D)
2. Configure the settings as required:  

**Keep logs for** – The number of days that the CTERA Edge Filer stores logs.  

**Store logs in** – The volume where the CTERA Edge Filer stores logs. If you choose **Memory**, the logs are deleted each time you reboot the CTERA Edge Filer.  

**Log Level** – The minimum log level to display in the CTERA Edge Filer user interface. For example, if you select **Critical**, then only **Critical**, **Alert**, and **Emergency** logs are displayed in the CTERA Edge Filer user interface.  

The logs are filtered accordingly.
3. If you made any changes, either click **Save** or click **Revert** to revert to the last saved configuration.

You can also configure the CTERA Edge Filer to send logs to a syslog server, described in [Configuring Syslog Settings](/v1/docs/configuring-logging-5-1-1#configuring-syslog-settings). While the CTERA Edge Filer log is limited by the amount of available storage space, a syslog server can store an unlimited number of logs.

          **Note**

          

Free syslog servers are available, such as Kiwi Syslog Daemon: [http://www.kiwisyslog.com/](http://www.kiwisyslog.com/).

## Configuring Syslog Settings

You can configure syslog logging only for this edge file, or, using the CTERA Portal *Edge Filer Syslog* service, CTERA Portal can function as a centralized hub to collect logs from all the edge filers and send these logs to one or more syslog servers.

The protocol used to send logs from an edge filer to the CTERA Portal uses a protocol that ensures messages are not lost. By using the *Edge Filer Syslog* service:

- You can manage multiple edge filer logs to Syslog.
- You ensure that logs are never lost. For example, when an edge filer connects directly to Syslog, if the WAN connection goes down to a Syslog server in the cloud, logs will be lost. Using the Edge Filer Syslog server, the logs are not lost, and when the WAN connection is re-established, sending logs resumes with no loss.
- You can use multiple Syslog destinations by defining more than one Syslog server.  

![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-HRUJ6NN2.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A27%3A34Z&se=2026-11-11T05%3A27%3A34Z&sr=c&sp=r&sig=OJdFPIwF%2Bq2pdGot6OEXZhkFWo5HxunnLe%2BWH%2BkRIK0%3D)

For details, see *Managing the Edge Filer Syslog* service in the CTERA Portal documentation.

**To configure syslog logging only for this edge filer:**

1. In the **Configuration** view, select **Logs > Syslog** in the navigation pane.  

The **Syslog** page is displayed.  

![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-0IQ88TVI.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A27%3A34Z&se=2026-11-11T05%3A27%3A34Z&sr=c&sp=r&sig=OJdFPIwF%2Bq2pdGot6OEXZhkFWo5HxunnLe%2BWH%2BkRIK0%3D)
2. Slide **Use Syslog** on to enable syslog logging.  

![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-PHH3GSLH.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A27%3A34Z&se=2026-11-11T05%3A27%3A34Z&sr=c&sp=r&sig=OJdFPIwF%2Bq2pdGot6OEXZhkFWo5HxunnLe%2BWH%2BkRIK0%3D)
3. Configure the syslog:  

**Minimum Event Severity** – The minimum event level to send to the Syslog server. For example, if you select **Critical**, then only **Critical**, **Alert**, and **Emergency** log entries are sent to the syslog server.  

**Server Address** – The syslog server's IP address.  

**Syslog Port** – The syslog server port number. The default port used by a syslog server is `514` when **Protocol Type** is `UDP`. The port to set  when **Protocol Type** is `TCP/TLS` is `6514`.  

**Protocol Type** – The protocol to use for sending logs to the syslog server: `UDP` or `TCP/TLS`.
4. To forward HTTP and HTTPS requests to the Syslog server, slide **Web Server Logging** on.  

![image.png](https://cdn.document360.io/30792387-cdcb-4791-aa14-94929bbcd3fe/Images/Documentation/image-QQ37MGF9.png?sv=2026-02-06&spr=https&st=2026-11-11T04%3A27%3A34Z&se=2026-11-11T05%3A27%3A34Z&sr=c&sp=r&sig=OJdFPIwF%2Bq2pdGot6OEXZhkFWo5HxunnLe%2BWH%2BkRIK0%3D)
5. If you made any changes, either click **Save** or click **Revert** to revert to the last saved configuration.

## Configuring Audit Log Settings

See [Auditing SMB File Access](/v1/docs/auditing-smb-file-access-5-1-1).