---
title: Troubleshoot with IPsec logs · Cloudflare Magic WAN docs
description: Magic WAN	customers can use IPsec logs to help them troubleshoot
  issues with their IPsec tunnels. This functionality is specifically aimed at
  the key-exchange portion of the IPsec handshake, where customers can run into
  issues. With IPsec logs, customers can set up a logpush job to forward their
  IPsec logs to their preferred storage service. Once they have the logs, they
  can investigate and find the root cause of their key exchange issues.
lastUpdated: 2025-09-25T14:23:12.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/magic-wan/ipsec-troubleshoot/
  md: https://developers.cloudflare.com/magic-wan/ipsec-troubleshoot/index.md
---

Magic WAN customers can use IPsec logs to help them troubleshoot issues with their IPsec tunnels. This functionality is specifically aimed at the key-exchange portion of the IPsec handshake, where customers can run into issues. With IPsec logs, customers can set up a logpush job to forward their IPsec logs to their preferred storage service. Once they have the logs, they can investigate and find the root cause of their key exchange issues.

## Set up an IPsec logpush job

1. In the Cloudflare dashboard, go to the **Logpush** page.

   [Go to **Logpush**](https://dash.cloudflare.com/?to=/:account/logs)

2. Select **Create a Logpush job**.

3. Select **IPsec logs** as your dataset.

Refer to the [Logpush documentation](https://developers.cloudflare.com/logs/logpush/) for more information about features, including the [available fields](https://developers.cloudflare.com/logs/logpush/logpush-job/datasets/account/ipsec_logs/) in the dataset.
