Plantronics + Polycom. Now together as Poly Logo

[FAQ] How can change Logging Levels or use Syslog?

Polycom Employee & Community Manager

[FAQ] How can change Logging Levels or use Syslog?

In order to troubleshoot Issues you may want to change the Level of logging details on the Phone.


NEW: Since UC Software 5.9.0 simply provide this via the Web Interface Diagnostics > Download Support Information Package



  • Polycom VVX Phones with a USB Port (no VVX1500) can follow these instructions => here <=
  • Polycom Trio phones can log to a USB stick following these instructions => here <=


Warning: Logging parameter changes can impair system operation. Do not change any logging parameters without prior consultation with your Polycom Reseller or Polycom Technical Support.


The <level/> Parameters control the logging detail level for individual components. These are the input filters into the internal memory-based log system.


The factory default level for all logging parameters is "4" or Minor Error.


  • Debug = 0
  • Event 1 = 1
  • Event 2 = 2
  • Event 3 = 3
  • Minor Error = 4
  • Major Error = 5
  • Fatal Error = 6


NOTE: In order to set the lowest Level of logging this Parameter may be used


Web Interface:




Settings > Logging > Global Settings > Global Log Level Limit > Log File Size (Kbytes) > 


Phone Model Size
SoundStation IP Leave as is
SoundPoint IP Leave as is
VVX prior to 5.5.0 180
VVX from 5.5.0  1000
Polycom Trio 10240



Example Phone Config File: 




In the above example all logging levels for the different Polycom Phones are set to their maximum levels using Substitution as shown => here <=


Depending on the Provisioning Server logs are uploaded to the Server and can be appended in order to capture a complete Boot Process and all the follow up messaging.


A log with an explanation of the single fields looks like this:

Example Log


  • The ID is the actual logging module. In the above example it is Support Objects / so
  • The Event Class is the logging level set in the above to Event 2
  • The Missed Events is usually 00 but if the phone is to busy to print logs the number will start to go higher
  • The text is the actual printed message of an event or error






Above shows a example time Stamp once the phone has successfully received an NTP time.


Before this the phone can only display the time elapsed since booting the phone.


The format usually is MMDDHHMMSS aka April the 16 and 17:02:25



You can change the detail level of the log either via a configuration file from the Provisioning Server:

<level log.level.change.sip="2" />

 or via the Web Interface (As the browser address, enter http://<phone’s IP address>):


SIP Software:






UC Software:






Above changed the detail level of the SIP Module to 2 /  Event 2.




If the environment where the Phone is installed does not support the usage of a Provisioning Server in order to be able to receive the Phones individual Log Files a Syslog server can be used.


Syslog is a standard for forwarding log messages in an IP network. The term “syslog” is often used for both the actual syslog protocol, as well as the application or library sending syslog messages.


In order to activate this feature please follow below:


Press the Menu Button




Select Settings




Select Advanced and add the Password




Select Admin Settings 




Select Network Configuration




Scroll down and select the Syslog Menu





add the IP Address or the Hostname of the Syslog Server (provided by your Network Administrator)


Change the Render Level for example to 2.


Or via the Web Interface UC Software 4.0.0 or later




Protocol Port
UDP 514
TCP 1468


The Syslog Server will now receive all logging Information containing Level 2 and lower.




Note: Depending on the SIP  / UC Software Version or Handset in question the menu may look different. Please consult the matching Admin Guide.


An example Configuration to log SIP messages at Debug Level via Syslog and also printing CPU and Memory usage periodically into the log files could be:


<web log.level.change.sip="0" device.set="1" device.syslog.renderLevel.set="1"
device.syslog.renderLevel="0" log.level.change.slog="2" log.render.level="0""memShow""showCpuLoad" log.sched.1.period="180" log.sched.2.period="180" log.sched.1.startTime="30" log.sched.2.startTime="30" device.syslog.serverName.set="1" device.syslog.serverName="" device.syslog.transport.set="1" device.syslog.transport="UDP" device.syslog.facility.set="1" device.syslog.facility="16" device.syslog.renderLevel.set="1" device.syslog.renderLevel="0" device.syslog.prependMac.set="1" device.syslog.prependMac="1" />



For your convenience a free syslog server program is attached.

Note: This program is for Windows machines only. 
It must be run under the Windows Command Prompt, i.e. DOS window.

Syntax when running the syslog server: 

C:\>syslogd -help
Usage:  syslogd [-p=port] [-o=filename] [-nl] [-s=all]

-p:  Listen to syslog messages at a port number other than the default (514). 
                 For example -p=9000
-o:  Output location and name for the log file of the captured syslog messages.
                 For example -o=c:\temp\test.log
-s:  Options to control time-stamping and source IP Address.
                -s=time enables time-stamping of each message
                -s=ip enables logging the source IP address of each message
                -s=all enables both time-stamp and source address
                Note that -s=all is equivalent to -s=time -s=ip
-nl: Insert an extra blank line after each message (for better readability).

Please run the the syslog server program with the following options (which includes time-stamping):

C:\>syslogd -nl -s=all

If you are using another syslog server program, please enable the time-stamping option of the program (usually time-stamping is enabled by default).



Another great free Syslog Server can be found => here <=





You may need more than one file:




Secure Syslog


Syslog can choose between UDP, TCP or TLS



<======== Signature / Disclaimer ========>
Please be aware:For questions about the type of support to expect please check here

Please also ensure you always check the VoIP , Video Endpoint , Skype for Business , PSTN or RPM FAQ's

Please remember, if you see a post that helped you , and it answers your question, please mark it as an "Accept as Solution".

The title Polycom Employee & Community Manager is an automatic setting within the community and any forum reply or post is based upon my personal experience and does not reflect the opinion or view of my employer.
Poly employee participation within this community is not mandatory and any post or FAQ article provided by myself is done either during my working hours or outside working hours, in my private time, and maybe answered on weekends, bank holidays or personal holidays.
Message 1 of 1