update_log_settings
Configure pfSense system log settings, including remote syslog servers, event categories, and log display options. Set enableremotelogging=True to activate remote syslog.
Instructions
Update the system log settings
The pfSense REST API field names are mirrored verbatim. Note that to
actually enable Remote Syslog you must set enableremotelogging=True —
setting remoteserver/ipprotocol alone leaves the feature off and
pfSense will normalise the remote-* fields back to null.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ppp | No | Send PPP events to remote syslog | |
| vpn | No | Send VPN (PPTP/IPsec/OpenVPN) events to remote syslog | |
| auth | No | Send authentication/login events to remote syslog | |
| dhcp | No | Log DHCP events | |
| ntpd | No | Send NTP daemon events to remote syslog | |
| filter | No | Log packets matched by firewall rules | |
| format | No | Log format ('rfc3164' or 'rfc5424') | |
| logall | No | Log all packets (not just those matching rules) | |
| system | No | Send general system events to remote syslog | |
| dpinger | No | Send gateway monitor (dpinger) events to remote syslog | |
| hostapd | No | Send wireless (hostapd) events to remote syslog | |
| routing | No | Send routing daemon events to remote syslog | |
| nentries | No | Number of log entries to display per page | |
| resolver | No | Send DNS resolver (unbound) events to remote syslog | |
| sourceip | No | Source IP address (interface) for syslog messages | |
| ipprotocol | No | IP protocol for remote syslog ('ipv4' or 'ipv6') | |
| portalauth | No | Send captive portal auth events to remote syslog | |
| logfilesize | No | Maximum log file size in bytes | |
| remoteserver | No | Primary remote syslog server (IP:port) | |
| reverseorder | No | Whether to display logs in reverse order (newest first) | |
| remoteserver2 | No | Secondary remote syslog server | |
| remoteserver3 | No | Tertiary remote syslog server | |
| logconfigchanges | No | Log configuration changes to syslog | |
| apply_immediately | No | Whether to apply changes immediately | |
| enableremotelogging | No | Master toggle for Remote Syslog. Must be True for remoteserver/ipprotocol/per-category toggles to take effect. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||