Collecting Logs

The machine stores three types of logs as follows:

Job log

• User file-related operations such as copying, storing in the Document Server, printing, sending faxes, and sending scan files

• Printing reports such as the configuration list output from the control panel

Access log

• Authentications such as login and logout activities

• Stored file operations such as creating, editing, and deleting

• Customer engineer operations such as internal storage formatting

• System operations such as viewing log transfer results

• Security operations such as specifying settings for encryption, unprivileged access detection, user lockout, and firmware authentication

Eco-friendly Log

• Main power ON and OFF

• Transitions in power status

• Job run times or time interval between jobs

• Paper consumption per hour

• Power consumption of the machine

Specify the types and items of logs to collect.

Specifying logs to collect using the control panel

1. Log in to the machine as the machine administrator on the control panel.
   Logging in to the Machine as an Administrator
   When custom-privileges administrators are registered, you can log in to the machine as a custom-privileges administrator with the Data Management privilege as well.
   Logging in to the Machine as a Custom-Privileges Administrator

2. On the Home screen, press [Settings].
   

3. Press [System Settings].

   

4. Press [Settings for Administrator] [Data Management] [Collect Logs Settings].

5. For each log type, select [Active] from the list.
   

6. Press [OK].

7. Press [Home] ().

8. When the confirmation dialog is displayed, press [Exit].
   The machine restarts automatically.

Specifying logs to collect using the control panel using Web Image Monitor

1. Log in to the machine as the machine administrator from Web Image Monitor.
   Logging in to the Machine as an Administrator
   When custom-privileges administrators are registered, you can log in to the machine as a custom-privileges administrator with the Data Management privilege as well.
   Logging in to the Machine as a Custom-Privileges Administrator

2. Click [Configuration] on the [Device Management] menu.
   

3. On the "Configuration" screen, click [Logs] in the "Device Settings" category.

4. Select [Active] of "Collect Job Logs", "Collect Access Logs", or "Collect Eco-friendly Logs" according to the log type to collect.

5. Specify the items to record in each log for "Job Log Collect Level", "Access Log Collect Level", or "Eco-friendly Log Collect Level".
   

   Job Log Collect Level

   • Level 1: All job logs are collected.

   Access Log Collect Level

   • Level 1: The following items are recorded in the access log.
     Internal Storage Format, All Logs Deletion, Log Setting Change, and Log Collection Item Change

   • Level 2: All access logs are collected.

   Eco-friendly Log Collect Level

   • Level 1: Eco-friendly Logs are not collected.

   • Level 2: All eco-friendly logs are collected.

   When a level is changed, the selection status of log details changes according to the level. You can change the settings of some of the items whether to collect or not.

6. Click [OK].

7. "Updating..." appears. Wait for about one or two minutes, and then click [OK].
   If nothing appears on the screen after you click [OK], wait for a while, and then refresh the web browser screen.

8. Log out of the machine, and then exit the Web browser.

Job Log Item	Log Type Attribute	Content
Copier: Copying	Copier: Copying	Details of normal and Sample Copy jobs.
Copier: Copying and Storing	Copier: Copying and Storing	Details of files stored in the Document Server that were also copied at the time of storage.
Document Server: Storing	Document Server: Storing	Details of files stored using the Document Server screen.
Document Server: Stored File Downloading	Document Server: Stored File Downloading	Details of files stored in the Document Server and downloaded using Web Image Monitor.
Stored File Printing	Stored File Printing	Details of files printed using the Document Server screen.
Scanner: Sending	Scanner: Sending	Details of sent scan files.
Scanner: Sending and Storing	Scanner: Sending and Storing	Details of scan files stored in the Document Server that were also sent at the time of storage.
Scanner: Storing	Scanner: Storing	Details of scan files stored in the Document Server.
Scanner: Stored File Downloading	Scanner: Stored File Downloading	Details of scan files stored in the Document Server and downloaded using Web Image Monitor.
Scanner: Stored File Sending	Scanner: Stored File Sending	Details of the stored scan files that were also sent.
Printer: Printing	Printer: Printing	Details of normal print jobs.
Printer: Locked Print (Incomplete)	Printer: Locked Print (Incomplete)	Log showing Locked Print documents temporarily stored on the machine.
Printer: Locked Print	Printer: Locked Print	Log showing Locked Print documents temporarily stored on the machine and printed from the control panel or through Web Image Monitor.
Printer: Sample Print (Incomplete)	Printer: Sample Print (Incomplete)	Log showing Sample Print documents temporarily stored on the machine.
Printer: Sample Print	Printer: Sample Print	Log showing Sample Print documents temporarily stored on the machine and printed from the control panel or through Web Image Monitor.
Printer: Hold Print (Incomplete)	Printer: Hold Print (Incomplete)	Log showing Hold Print documents temporarily stored on the machine.
Printer: Hold Print	Printer: Hold Print	Log showing Hold Print documents temporarily stored on the machine and printed from the control panel or through Web Image Monitor.
Printer: Stored Print	Printer: Stored Print	Details of Stored Print files stored on the machine.
Printer: Store and Normal Print	Printer: Store and Normal Print	Details of Stored Print files that were printed at the time of storage (when "Job Type:" was set to [Store and Print] in printer properties).
Printer: Stored File Printing	Printer: Stored File Printing	Details of Stored Print files printed from the control panel or Web Image Monitor.
Printer: Document Server Sending	Printer: Document Server Sending	Details of files stored in the Document Server when "Job Type:" was set to [Document Server] in printer properties.
Report Printing	Report Printing	Details of reports printed from the control panel.
Result Report Printing/Emailing	Result Report Printing/Emailing	Details of job results printed or notified by e-mail.
Scanner: TWAIN Driver Scanning	Scanner: TWAIN Driver Scanning	Details of scan files that were scanned using TWAIN driver.
Printer: Hold Print File Printing	Printer: Hold Print File Printing	When a document is held for printing and stored temporarily on the machine, this records the time a user specified for the document to be printed from the control panel or Web Image Monitor.
Fax: Sending	Fax: Sending	Details of faxes sent from the machine.
Fax: LAN-Fax Sending	Fax: LAN-Fax Sending	Details of fax files sent from computers.
Fax: Storing	Fax: Storing	Details of fax files stored on the machine using the Fax function.
Fax: Stored File Printing	Fax: Stored File Printing	Details of fax files stored on the machine and printed using the Fax function.
Fax: Stored File Downloading	Fax: Stored File Downloading	Details of fax files stored in the Document Server and downloaded using Web Image Monitor.
Fax: Receiving	Fax: Receiving	Details of received fax files.
Fax: Receiving and Delivering	Fax: Receiving and Delivering	Details of faxes that received and delivered by the machine.
Fax: Receiving and Storing	Fax: Receiving and Storing	Details of faxes that received and stored by the machine.

Access Log Item	Log Type Attribute	Content
Login*1	Login	Times of login.
Logout	Logout	Times of logout.
File Storing	File Storing	Details of files stored in the Document Server.
Stored File Deletion	Stored File Deletion	Details of files deleted from the Document Server.
All Stored Files Deletion	All Stored Files Deletion	Details of deletions of all Document Server files.
Internal Storage Format *2	Internal Storage Format	Details of internal storage formatting.
Unauthorized Copying	Unauthorized Copying	Details of documents scanned with "Data Security for Copying".
All Logs Deletion	All Logs Deletion	Details of deletions of all logs.
Log Setting Change	Log Setting Change	Details of changes made to log settings.
Transfer Log Result	Transfer Log Result	Log of the result of log transfer to Remote Communication Gate S.
Log Collection Item Change	Log Collection Item Change	Details of changes to job log collection levels, access log collection levels, and log items to collect.
Collect Encrypted Communication Logs	Collect Encrypted Communication Logs	Log of encrypted transmissions between the utility, Web Image Monitor or outside devices.
Access Violation*3	Access Violation	Details of failed access attempts.
Lockout	Lockout	Details of lockout activation.
Firmware: Update	Firmware: Update	Details of firmware updates.
Firmware: Structure Change	Firmware: Structure Change	Details of structure changes that occurred when an SD card was inserted or removed, or when an unsupported SD card was inserted.
Firmware: Structure*4	Firmware: Structure	Details of checks for changes to firmware module structure made at times such as when the machine was switched on.
Machine Data Encryption Key Change	Machine Data Encryption Key Change	Details of changes made to encryption keys using "Machine Data Encryption Key Change" setting.
Firmware: Invalid	Firmware: Invalid	Details of checks for firmware validity made at times such as when the machine was switched on.
Date/Time Change	Date/Time Change	Details of changes made to date and time settings.
File Access Privilege Change	File Access Privilege Change	Log for changing the access privilege to the stored files.
Password Change	Password Change	Details of changes made to the login password.
Administrator Change	Administrator Change	Details of changes of administrators.
Address Book Change	Address Book Change	Details of changes made to Address Book entries.
Capture Error	Capture Error	Details of file capture errors.
Machine Configuration	Machine Configuration	Log of changes to the machine's settings.
Back Up Address Book	Back Up Address Book	Log of when data in the Address Book is backed up.
Restore Address Book	Restore Address Book	Log of when data in the Address Book is restored.
Enhanced Print Volume Use Limitation: Tracking Permission Result	Enhanced Print Volume Use Limitation: Tracking Permission Result	Log of when a tracking error occurs.
Counter Clear Result: Selected User(s)	Counter Clear Result: Selected User(s)	Log of when the counter for an individual user is cleared.
Counter Clear Result: All Users	Counter Clear Result: All Users	Log of when the counters for all users are cleared.
Import Device Setting Information	Import Device Setting Information	Log of when a device setting information file is imported.
Export Device Setting Information	Export Device Setting Information	Log of when a device setting information file is exported.
Creating/Deleting Folders	Creating/Deleting Folders	Log of when folders are created and deleted.
Stored File Editing	Stored File Editing	Log of a file edited by being combined, inserted, or deleted.
Insertion into another File	Insertion into another File	Log of combining or inserting to another file.

*1 There is no "Login" log made for SNMPv3.

*2 If the internal storage is formatted, all the log entries up to the time of the format are deleted and a log entry indicating the completion of the format is made.

*3 Access Violation indicates the system has experienced frequent remote DoS attacks involving logon attempts through user authentication.

*4 The first log created after the power is turned on is the "Firmware: Structure" log.

Eco-friendly Log Items	Log Type Attribute	Content
Main Power On	Main Power On	Log of when the main power switch is turned on.
Main Power Off	Main Power Off	Log of when the main power switch is turned off.
Power Status Transition Result	Power Status Transition Result	Log of the results of transitions in power status.
Job Related Information	Job Related Information	Log of job related Information.
Paper Usage	Paper Usage	Log of the amount of paper used.
Power Consumption	Power Consumption	Log of power consumption.

You can download the logs recorded on the machine as a CSV file.

1. Log in to the machine as the machine administrator from Web Image Monitor.
   Logging in to the Machine as an Administrator

2. Click [Configuration] on the [Device Management] menu.
   

3. On the "Configuration" screen, click [Download Logs] in the "Device Settings" category.

4. Select the log type on "Logs to Download", and then click [Download].
   The downloaded log files are stored in the "Download" folder.
   

   • Security Logs: Downloads both job logs and access logs into a single file.

   • Security Logs (Job Log): Downloads job logs only.

   • Security Logs (Access Log): Downloads access logs only.

   • Eco-friendly Logs: Downloads eco-friendly logs only.

5. Log out of the machine, and then exit the Web browser.

Number of logs that can be kept on the machine

Maximum numbers of logs that can be stored in the machine are as follows:

Log types	Maximum number of logs
Job logs	4,000
Access logs	12,000
Eco-friendly logs	4,000

• If the number of logs that can be stored on the machine exceeds the limit and new logs are generated, old logs are overwritten by new ones. If logs are not downloaded periodically, it may not be possible to record the old logs onto files.

• The example below shows when the number of stored logs exceeds the maximum and old logs are overwritten.
  When the oldest two access logs are overwritten by the newest two access logs, the downloaded logs lack the log IDs.
  

• Check the message in the last line of the downloaded logs to determine whether overwriting occurs or not while the logs were downloading. The messages are shown below:
  

  • When overwriting did not occur:
    Download completed.

  • When overwriting occurred:
    Download completed.
    A part of the logs before Log ID XXXX does not exist anymore.
    (The logs before "Log ID XXXX" are deleted.)

Order of printer job log and access log

Print log entries are recorded before the login entry is recorded in the access log.

Details of jobs (reception, processing, output of the jobs' data, and so on) are recorded as single entries.

When the machine receives a print job, it creates a log ID for the job and records information about data reception in the job log. (1)

The machine then creates a log ID for the authentication information and records it in the access log of login. (2)

Log related to job data processing is added in the job log created first. (3)

In the end, it creates a log ID for logout entry and records it in the access log. (4)

In the result, when downloading job log, access log of login, and access log of logout, they are aligned in this order.

You can delete all logs recorded on the machine.

[Delete All Logs] appears when one of the job log, access log, or eco-friendly log is set to [Active].

Deleting all logs using the control panel

1. Log in to the machine as the machine administrator on the control panel.
   Logging in to the Machine as an Administrator
   When custom-privileges administrators are registered, you can log in to the machine as a custom-privileges administrator with the Data Management privilege as well.
   Logging in to the Machine as a Custom-Privileges Administrator

2. On the Home screen, press [Settings].
   

3. Press [System Settings].

   

4. Press [Settings for Administrator] [Data Management] [Delete All Logs].

5. When the confirmation dialog is displayed, press [Yes].

6. When the confirmation dialog is displayed, press [Exit].

7. Press [Home] (), and then log out of the machine.

Deleting all logs using Web Image Monitor

1. Log in to the machine as the machine administrator from Web Image Monitor.
   Logging in to the Machine as an Administrator
   When custom-privileges administrators are registered, you can log in to the machine as a custom-privileges administrator with the Data Management privilege as well.
   Logging in to the Machine as a Custom-Privileges Administrator

2. Click [Configuration] on the [Device Management] menu.
   

3. On the "Configuration" screen, click [Logs] in the "Device Settings" category.

4. Click [Delete] of "Delete All Logs", and then click [OK].

5. Log out of the machine, and then exit the Web browser.

Disabling log transfer to the log collection server using the control panel

1. Log in to the machine as the machine administrator on the control panel.
   Logging in to the Machine as an Administrator
   When custom-privileges administrators are registered, you can log in to the machine as a custom-privileges administrator with the Data Management privilege as well.
   Logging in to the Machine as a Custom-Privileges Administrator

2. On the Home screen, press [Settings].
   

3. Press [System Settings].

   

4. Press [Settings for Administrator] [Data Management] [Transfer Log Setting].

5. From the list next to Transfer Log Setting, select [Do not Forward].
   

6. Press [OK].

7. When the confirmation dialog is displayed, press [OK].

8. Press [Home] (), and then log out of the machine.

Disabling log transfer to the log collection server using Web Image Monitor

1. Log in to the machine as the machine administrator from Web Image Monitor.
   Logging in to the Machine as an Administrator
   When custom-privileges administrators are registered, you can log in to the machine as a custom-privileges administrator with the Data Management privilege as well.
   Logging in to the Machine as a Custom-Privileges Administrator

2. Click [Configuration] on the [Device Management] menu.
   

3. On the "Configuration" screen, click [Logs] in the "Device Settings" category.

4. Under "Common Settings for All Logs", select [Inactive] of "Transfer Logs", and then click [OK].

5. Log out of the machine, and then exit the Web browser.

When job logs cannot be transferred to the log collection server, or when the number of logs stored in the machine approaches the upper limit, a notification message is displayed on the control panel of the machine and notification is sent to the administrator by e-mail. When the number of logs stored in the machine reaches the upper limit, the machine stops executing new jobs to prevent losing logs.

Specifying the setting using the control panel

1. Log in to the machine as the machine administrator on the control panel.
   Logging in to the Machine as an Administrator
   When custom-privileges administrators are registered, you can log in to the machine as a custom-privileges administrator with the Data Management privilege as well.
   Logging in to the Machine as a Custom-Privileges Administrator

2. On the Home screen, press [Settings].
   

3. Press [System Settings].
   

4. Press [Settings for Administrator] [Data Management] [Job Execution Restrictions When Log Limit is Reached].

5. From the list next to Job Execution Restrictions When Log Limit is Reached select [On].
   

6. Press [OK].

7. Press [Home] (), and then log out of the machine.

Specifying the setting using Web Image Monitor

1. Log in to the machine as the machine administrator from Web Image Monitor.
   Logging in to the Machine as an Administrator
   When custom-privileges administrators are registered, you can log in to the machine as a custom-privileges administrator with the Data Management privilege as well.
   Logging in to the Machine as a Custom-Privileges Administrator

2. Click [Configuration] on the [Device Management] menu.
   

3. On the "Configuration" screen, click [System] in the "Device Settings" category.

4. Under "General Settings", select [Active] of "Job Execution Restrictions When Log Limit is Reached", and then click [OK].

5. Log out of the machine, and then exit the Web browser.