The VPN connection service lets you view IPsec connection logs through TLS, so you can troubleshoot IPsec connection issues. The related configuration is as follows:

Configuration

Description

Configuration	Description
Log type	IPsec connection log.
Log storage location	After you enable the connection log feature in the IPsec connection console, TLS will create a dedicated project and log topic for IPsec connection logs in the relevant region and associate them with the VPN connection. Modifying or deleting the dedicated project and topic in the TLS console is not supported. Dedicated project: vpn_ipsec-log Dedicated log topic: vpn-ipsec-log
Log storage period	The log storage period is 30 days by default. Logs will be automatically deleted after expiration. The log storage period can not be modified.
Log shards	One shard is preset. Auto split is enabled by default. When write traffic increases, TLS automatically splits shards to meet data writing needs.
Index settings	Indexes have been configured for all fields. Indexes can not be modified.
Log fields	For a detailed list of log fields, see VPN log fields.

Collect VPN logs

For information on fees, usage restrictions, and detailed steps to enable IPsec connection logs, see View IPsec VPN connection logs.

VPN log fields

The contents of the VPN IPsec connection logs are displayed as key-value pairs, that is, {key: value}. The log fields and their meanings are as follows:

Field

Description

Field	Description
__path__	Original log reserved field. For IPsec connection logs, the __path__ is always ipsec.log.
__source__	Original log reserved field. For IPsec connection logs, the __source__ is always the current IPsec connection ID.
message	Detailed information about the log text.
vpn_connection_id	ID of the current IPsec connection.

Last updated: 2026.06.09 16:54:43

Public security network record in Beijing: No. 11010802032137