# Pritunl log export to a syslog location

**URL:** <https://forum.pritunl.com/t/pritunl-log-export-to-a-syslog-location/154>\
**Category:** Pritunl Zero\
**Created:** [May 24, 2022, 4:40pm UTC](https://forum.pritunl.com/t/pritunl-log-export-to-a-syslog-location/154 "2022-05-24T16:40:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![rkalia](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/r/da6949/32.png) [@rkalia](https://forum.pritunl.com/u/rkalia)\
**Post date:** [May 24, 2022, 4:40pm UTC](https://forum.pritunl.com/t/pritunl-log-export-to-a-syslog-location/154/1 "2022-05-24T16:40:38Z")

</div>

Hi Team,  
Is there any way we can export pritunl application , admin logs to a central remote location that can be a syslog etc.  
Rajeev

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [May 24, 2022, 10:00pm UTC](https://forum.pritunl.com/t/pritunl-log-export-to-a-syslog-location/154/2 "2022-05-24T22:00:14Z")

</div>

Once auditing is enabled events will be logged in JSON format to `/var/log/pritunl_journal.log`. This file can be parsed by logging systems. The [**auditing documentation**](https://docs.pritunl.com/docs/auditing) has more information.

---

<div class="post-metadata">

**Author:** ![rkalia](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/r/da6949/32.png) [@rkalia](https://forum.pritunl.com/u/rkalia)\
**Post date:** [May 24, 2022, 10:22pm UTC](https://forum.pritunl.com/t/pritunl-log-export-to-a-syslog-location/154/3 "2022-05-24T22:22:19Z")

</div>

Thanks for the reply . This is for Pritunl Zero. We have logs

-rw-r–r–. 1 root root 1168075 May 24 22:19 pritunl-zero.log

the format of this log is not JSON format . What is the command of enable and disable audit logs in Pritunl zero

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [May 25, 2022, 1:44am UTC](https://forum.pritunl.com/t/pritunl-log-export-to-a-syslog-location/154/4 "2022-05-25T01:44:56Z")

</div>

Pritunl Zero uses the Systemd logs. For more detailed logging ElasticSearch can be configured to log all web requests proxied through the Pritunl Zero server.

---

<div class="post-metadata">

**Author:** ![rkalia](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/r/da6949/32.png) [@rkalia](https://forum.pritunl.com/u/rkalia)\
**Post date:** [May 25, 2022, 12:59pm UTC](https://forum.pritunl.com/t/pritunl-log-export-to-a-syslog-location/154/5 "2022-05-25T12:59:22Z")

</div>

I am not able to find out documentation about how to setup ElasticSearch on Pritunl zero. We just have 3 field in setting. I have my Elastic Search read but I am getting below error after putting information in setting tab  
search: Failed to check elastic index  
cannot retrieve information from OpenSearch  
ORIGINAL STACK TRACE:  
[github.com/pritunl/pritunl-zero/search.(\*Client).CreateIndex](http://github.com/pritunl/pritunl-zero/search.(*Client).CreateIndex)