Skip to main content

System Log

The System Log section provides real-time logging and traffic monitoring tools. It allows administrators to track system events, monitor active network connections, and configure remote log forwarding via Syslog. This section explains available features and how to configure them.

image.png

Features

  • Log Timezone – Configure automatic or manual timezone settings for accurate log timestamps. 

  • Traffic Monitor – Track active network sessions and analyze real-time traffic flow with conntrack module.

  • Syslog Server Integration – Forward system logs to a remote Syslog server for centralized storage and compliance.

  • Real-Time Log View – View live logs with filtering capabilities.

Configuring Log Timezone

  1. Navigate to System > System Log page.

  2. Under Log Timezone, select Auto Timezone to enable automatic detection (Public IP Based).

    image.png

  3. To set manually, uncheck Auto Timezone and select a timezone from the dropdown list.

  4. Click Save to apply changes.

What is Traffic Monitoring (Conntrack)?

Conntrack (Connection Tracking) is a Linux kernel module that keeps track of active network connections passing through the Gateway. It is commonly used in firewalling, NAT (Network Address Translation), and traffic analysis to monitor which connections are currently established, new, or closing.

Is Conntrack Logging Legally Required?
In many countries, retaining connection logs is required for legal compliance, cybersecurity, and auditing purposes. Conntrack itself does not store logs permanently, but logging policies may require exporting connection records to a Syslog server (external storage).

  • EU (GDPR, NIS Directive) – Retaining logs may be required for security.
  • USA (CFAA, CISA, ISP Regulations) – Some industries (e.g., ISPs) must log and retain connection data.
  • Other Countries (Local Data Retention Laws) – Some nations require ISPs and businesses to store logs for months/years for security and law enforcement purposes.

How to Ensure Compliance:

  • Enable Remote Logging – Send logs to a Syslog server for long-term storage.
  • Check Local Regulations – Legal requirements vary; ensure compliance based on your location.




Enabling Traffic Monitoring (Conntrack)

  1. Navigate to System > System Log.

  2. Under Traffic Monitor section, toggle Enable Traffic Monitor.

    image.png

  3. Select a Protocol (TCP, UDP, or both).

  4. Choose a Port Option:

    • All Ports

    • HTTP only (Port 80)

    • HTTPS only (Port 443)

    • Custom Ports (Manually enter specific ports).

  5. Select an Interface (All Interfaces, Guest only, or Local only).

  6. Click Save to apply changes.

⚠️ Note: Enabling Conntrack may increase CPU and memory load. Ensure your device has adequate resources



Configuring Syslog Server for Remote Logging

  1. Navigate to System > System Log.
  2. Under Syslog Server section, toggle te switch to Enabled

    image.png

  3. Enter the Syslog Server IP Address (public or local)

  4. Set the Server Port (default: 514).

  5. Specify a Source Address (0.0.0.0 for auto-detection).

  6. Select Log data you would like to forward, by enabling toggles

  7. Enable the log types to forward:

      • Hotspot

      • DHCP

      • Wireless

      • CAP

      • Conntrack

     

  8. Click Save to activate remote logging.

Viewing and Filtering Log in Realtime

  1. Navigate to System > System Log.

    image.png

  2. Select log categories to filter:

    • Hotspot – Logs related to guest network authentication.

    • DHCP – Logs for IP lease assignments.

    • Wireless – Logs for WiFi events and connections.

    • CAP – Logs related to controlled AP connections.

    • Conntrack – Logs for real-time network traffic.

  3. Logs update automatically every 30 seconds.

  4. Click on a column header to sort logs by Time, Type, or Message.


Troubleshooting & FAQs

Log Not Updating

  • Refresh the page or wait for the next update cycle (30 seconds).

High CPU Usage After Enabling Conntrack Module

  • Reduce monitored ports or restrict monitoring to specific interfaces.

  • Disable Conntrack if unnecessary for your setup.

Important Notes

  • Logs are stored temporarily and will be lost on device restart.

  • Remote logging (via Syslog) ensures long-term storage for audits and compliance. 

  • Filter logs dynamically to focus on specific events or troubleshooting needs.


Back to top