Log and Report
Overview
Use the system screens to configure daily reporting and log settings.
What You Can Do In this Chapter
• The Log Setting screens (Log Setting) specify which logs are emailed, where they are emailed, and how often they are emailed.
Log Setting
These screens control log messages and alerts. A log message stores the information for viewing (for example, in the Monitor > View Log screen). Usually, alerts are used for events that require more serious attention, such as system errors and attacks.
The Log Setting screen provides a summary of all the settings. You can use the Edit Log Setting screen to maintain the detailed settings (such as log categories, server names, etc.) for any log. Alternatively, if you want to edit what events is included in each log, you can also use the Active Log Summary screen to edit this information for all logs at the same time.
The following table describes the labels in this screen.
Configuration > Log & Report > Log Setting 
Label
Description
Edit
Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.
Activate
To turn on an entry, select it and click Activate.
Inactivate
To turn off an entry, select it and click Inactivate.
#
This field is a sequential value, and it is not associated with a specific log.
Status
This field shows whether the log is active or not.
Name
This field displays the name of the log (system log or one of the remote servers).
Log Format
This field displays the format of the log.
Internal - system log; you can view the log on the View Log tab.
VRPT/Syslog - Zyxel’s Vantage Report, syslog-compatible format.
CEF/Syslog - Common Event Format, syslog-compatible format.
Summary
This field is a summary of the settings for each log.
Active Log Summary
Click this button to open the Active Log Summary screen.
Apply
Click this button to save your changes (activate and deactivate logs) and make them take effect.
Edit Remote Server
This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon.
The following table describes the labels in this screen.
Configuration > Log & Report > Log Setting > Edit Remote Server 
Label
Description
Log Settings for Remote Server
Active
Select this checkbox to send log information according to the information in this section. You specify what kinds of messages are included in log information in the Active Log section.
Log Format
This field displays the format of the log information. It is read-only.
VRPT/Syslog - Zyxel’s Vantage Report, syslog-compatible format.
CEF/Syslog - Common Event Format, syslog-compatible format.
Server Address
Type the server name or the IP address of the syslog server to which to send log information.
Log Facility
Select a log facility. The log facility allows you to log the messages to different files in the syslog server. Please see the documentation for your syslog program for more information.
Active Log
Selection
Use the Selection drop-down list to change the log settings for all of the log categories.
disable all logs (red X) - do not send the remote server logs for any log category.
enable normal logs (green check mark) - send the remote server log messages and alerts for all log categories.
enable normal logs and debug logs (yellow check mark) - send the remote server log messages, alerts, and debugging information for all log categories.
#
This field is a sequential value, and it is not associated with a specific address.
Log Category
This field displays each category of messages. It is the same value used in the Display and Category fields in the View Log tab. The Default category includes debugging messages generated by open source software.
Selection
Select what information you want to log from each Log Category (except All Logs; see below). Choices are:
disable all logs (red X) - do not log any information from this category
enable normal logs (green checkmark) - log regular information and alerts from this category
enable normal logs and debug logs (yellow check mark) - log regular information, alerts, and debugging information from this category
OK
Click this to save your changes and return to the previous screen.
Cancel
Click this to return to the previous screen without saving your changes.
Active Log Summary
This screen allows you to view and to edit what information is included in the system log and remote servers at the same time. It does not let you change other log settings.
This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.)The following table describes the fields in this screen.
Configuration > Log & Report > Log Setting > Active Log Summary 
Label
Description
Active Log Summary
If the Zyxel Device is set to controller mode, the AC section controls logs generated by the controller and the AP section controls logs generated by the managed APs.
System log
Use the System Log drop-down list to change the log settings for all of the log categories.
disable all logs (red X) - do not log any information for any category for the system log or email any logs to email server 1 or 2.
enable normal logs (green check mark) - create log messages and alerts for all categories for the system log. If email server 1 or 2 also has normal logs enabled, the Zyxel Device will email logs to them.
enable normal logs and debug logs (yellow check mark) - create log messages, alerts, and debugging information for all categories. The Zyxel Device does not email debugging information, even if this setting is selected.
Remote Server 1~4
For each remote server, use the Selection drop-down list to change the log settings for all of the log categories.
disable all logs (red X) - do not send the remote server logs for any log category.
enable normal logs (green check mark) - send the remote server log messages and alerts for all log categories.
enable normal logs and debug logs (yellow check mark) - send the remote server log messages, alerts, and debugging information for all log categories.
#
This field is a sequential value, and it is not associated with a specific address.
Log Category
This field displays each category of messages. It is the same value used in the Display and Category fields in the View Log tab. The Default category includes debugging messages generated by open source software.
System log
Select which events you want to log by Log Category. There are three choices:
disable all logs (red X) - do not log any information from this category
enable normal logs (green checkmark) - create log messages and alerts from this category
enable normal logs and debug logs (yellow check mark) - create log messages, alerts, and debugging information from this category; the Zyxel Device does not email debugging information, however, even if this setting is selected.
Remote Server 1~4 Syslog
For each remote server, select what information you want to log from each Log Category (except All Logs; see below). Choices are:
disable all logs (red X) - do not log any information from this category
enable normal logs (green checkmark) - log regular information and alerts from this category
enable normal logs and debug logs (yellow check mark) - log regular information, alerts, and debugging information from this category
OK
Click this to save your changes and return to the previous screen.
Cancel
Click this to return to the previous screen without saving your changes.