---
title: Troubleshoot with IPsec logs · Cloudflare Magic Transit docs
description: Magic Transit	customers can use IPsec logs to help them
  troubleshoot issues with their IPsec tunnels. This functionality is
  specifically aimed at the key-exchange portion of the IPsec handshake, where
  customers can run into issues. With IPsec logs, customers can set up a logpush
  job to forward their IPsec logs to their preferred storage service. Once they
  have the logs, they can investigate and find the root cause of their key
  exchange issues.
lastUpdated: 2025-09-25T14:23:12.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/magic-transit/ipsec-troubleshoot/
  md: https://developers.cloudflare.com/magic-transit/ipsec-troubleshoot/index.md
---

Magic Transit customers can use IPsec logs to help them troubleshoot issues with their IPsec tunnels. This functionality is specifically aimed at the key-exchange portion of the IPsec handshake, where customers can run into issues. With IPsec logs, customers can set up a logpush job to forward their IPsec logs to their preferred storage service. Once they have the logs, they can investigate and find the root cause of their key exchange issues.

## Set up an IPsec logpush job

1. In the Cloudflare dashboard, go to the **Logpush** page.

   [Go to **Logpush**](https://dash.cloudflare.com/?to=/:account/logs)

2. Select **Create a Logpush job**.

3. Select **IPsec logs** as your dataset.

Refer to the [Logpush documentation](https://developers.cloudflare.com/logs/logpush/) for more information about features, including the [available fields](https://developers.cloudflare.com/logs/logpush/logpush-job/datasets/account/ipsec_logs/) in the dataset.
