Logging

Logging and audit

Runtime logs are JSON lines on standard error. Configure the minimum level in [log] as off, error, warn, info, or debug.

Each event includes timestamp, level, module, and message. Session, channel, provider, and duration fields are added where relevant. Credential values, credential-shaped substrings, embedded secret JSON, and sensitive host paths are scrubbed before emission.

phoenix service logs reads recent systemd journal entries for the installed service. Chat /verbose and /trace settings affect user-visible tool detail, not service logging.

[security] audit_log = true creates a separate owner-only JSONL action record. Audit entries include operation, target, result, and timing while redacting values. The file rotates at a bounded size. Audit logging remains off until enabled.

See Security, Service-and-Updates, and Configuration.