Connector logs help you identify and troubleshoot potential issues with
custom or commercial connectors.
To view connector logs, follow these steps:
Go to SOAR Settings > Ingestion > Connectors.
Select the relevant connector and click the Logs tab.
Click the Enable Log Collection toggle to on and select the required level
from the Log level menu.
Click
autorenew
Refresh to display the newly collected logs on the page.
After three hours, the Enable Log Collection toggle turns off automatically, and
the timer stops. You can choose to disable it manually at any time. The
logs remain visible on the page until the next time you enable log collection.
Each log entry has an icon that identifies the issue with a short description.
Click View More to see the full log details.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eConnector logs aid in identifying and resolving issues with custom or commercial connectors within Google SecOps SOAR.\u003c/p\u003e\n"],["\u003cp\u003eLogs can be accessed via SOAR Settings, under the Ingestion and Connectors tabs, after selecting a particular connector.\u003c/p\u003e\n"],["\u003cp\u003eLog collection is enabled via a toggle and log levels can be selected, however, log collection will automatically disable after three hours.\u003c/p\u003e\n"],["\u003cp\u003eNewly collected logs during the three-hour period do not automatically refresh and will need the refresh option to be clicked to view them.\u003c/p\u003e\n"],["\u003cp\u003eLog entries have an icon and description which identifies issues, with a "View More" option to see full details for the selected log.\u003c/p\u003e\n"]]],[],null,["View connector logs \nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \nConnector logs help you identify and troubleshoot potential issues with\ncustom or commercial connectors.\n\nTo view connector logs, follow these steps:\n\n1. Go to **SOAR Settings \\\u003e Ingestion \\\u003e Connectors**.\n2. Select the relevant connector and click the **Logs** tab.\n3. Click the **Enable Log Collection** toggle to on and select the required level from the **Log level** menu.\n4. Click autorenew **Refresh** to display the newly collected logs on the page.\n\n\nAfter three hours, the **Enable Log Collection** toggle turns off automatically, and\nthe timer stops. You can choose to disable it manually at any time. The\nlogs remain visible on the page until the next time you enable log collection.\n\nEach log entry has an icon that identifies the issue with a short description.\nClick **View More** to see the full log details.\n| **Note:** New logs collected during the three-hour period don't display automatically; you need to click the **Enable Log Collection** toggle to on to view them.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
