The Logging Page contains two sections. The Syslog section has settings to enable and configure settings for Syslog, the main function that logs system events. Web Monitoring contains settings to enable/configure the function to let you monitor log/monitor web searches and which domains have been visited.

Log Internally: Enables FreshTomato logging. By default, FreshTomato saves logs to the router's internal memory, where they may be extracted or viewed directly on the Logs page. The logs consume router memory, but may be viewed directly on the router itself. (Default: Enabled).

Max size before rotate: Log rotation creates new log files and archives & removes old ones to save drive space. The number entered here specifies the maximum space log files can occupy before they are rotated, (in Kb).

Number of rotated logs to keep: Specifies how many rotated log files will be maintained in the rotated logs archive.

Custom Log File Path: Lets you set a custom log file path. A displayed tip reminds you to check the path exists and is writable.
(Default path: /var/log/messages).

Log To Remote System: Provides network support to the syslogd facility. This means messages can be forwarded from one node running syslogd to another node running syslogd, where they will be actually logged to a disk file. ¹⁾

IP Address / Port: The IP address of the host to receive syslog data, and the port on which data are sent.

Generate Marker: Makes log files easier to read. Checking this causes “——MARK—–” to be inserted into the log
at the specified interval.

• Disabled
• Every 30 Minutes
• Every 1 hour
• Every 2 hours

Events Logged:

• Access Restriction - Causes logging of Access Restriction events.
• Cron - Causes Cron events to be logged.
• DHCP Client - Causes logging of DHCP IP addressing events.
• NTP - Causes logging of Network Time Protocol events.
• Scheduler - Causes logging of events set in the Scheduler menu.

Minimum Log Level: Here, select the minimum level of messages to be logged.

Here, “minimum” means that whichever option you select from the list, that level's messages and all those
higher in the list will be logged.

• Emergency - Only Emergency-level messages will be logged.
• Alert - Messages categorized as Alert and higher will be logged.
• Critical - Messages categorized as Critical and higher will be logged.
• Error - Messages of Error level or higher will be logged.
• Warning - Messages of Warning level or higher will be logged.
• Notice - Messages of Notice level or higher will be logged.
• Info - Messages of Information level or higher will be logged.
• Debug - Debug-level information and all other levels will be logged.

Connection Logging:

• Inbound
  • Disabled - Disables logging of incoming connections.
  • If Blocked by Firewall - Logs incoming connection attempts blocked by the firewall.
  • If Allowed by Firewall - Logs incoming connection attempts allowed by the firewall.
  • Both - Logs all incoming connection attempts.
• Outbound
  • Disabled - Disables logging of outgoing connections.
  • If Blocked by Firewall - Logs outgoing connection attempts blocked by the firewall.
  • If Allowed by Firewall - Logs outgoing connection attempts allowed by the firewall.
  • Both - Logs all outgoing connection attempts.
• Limit - Here, enter the maximum messages per minute to be logged in the system log.
  Enter '0' for unlimited. (Default: 60).

Enable » Takes you to the Administration/Logging menu (and Syslog settings).

Monitor Web Usage: Enables/disables Web Monitoring. (Default: Disabled).

Monitor: Select the Device/s you wish to monitor.

• All Computers /Devices * - Monitors all devices (Default).
• The following - Monitors only devices entered here.
• All except - Monitors all devices except those entered here.

Number of Entries to remember: The number of Domains visited and the number of Searches to record in the log file.

Entering: “0” makes the number unlimited (and therefore) allows an unlimited log size. Verify you have the storage space.

Daily Backup: Enables backup of Web Monitor logs to the default backup directory. (Default: Disabled).

Clear Data After Backup: If enabled, empties the log file after a backup is performed. (Default: Disabled)

Backup Directory: Specifies where backup files will be stored. (Default: /tmp).

NOTE: The default (\tmp) folder contents are emptied after reboot. Consider using USB/CIFS/JFFS as permanent storage.

Web usage won't work properly if the FreshTomato client to monitor is running a direct TOR or VPN Internet connection. FreshTomato cannot monitor such connections since they are already encrypted. This can also include some IPv6 tunneling protocols, such as 6in4 Static tunnel.