---
title: "How to Enable MFA Client Logs"
slug: "enabling-mfa-client-logs"
description: "How to enable MFA Client Logs in the Identity Automation Healthcare offering."
tags: ["MFA", "Logs", "Client", "Registry"]
updated: 2026-05-18T21:24:40Z
published: 2026-05-18T21:24:40Z
canonical: "mfa.rapididentity.com/enabling-mfa-client-logs"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://mfa.rapididentity.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Enabling MFA Client Logs

There are 2 ways to enable the MFA client logs. The first method enables logs on just the one computer, and it's done manually. The second method enables the logs through your MFA policy and enables the logs on all MFA clients that sync with that MFA policy.

## Logging Output Path

```
C:\Program Files\2FA\ONE\Client\logs\
```

---

## Enable Logging Manually

1. On the target client computer, navigate to `Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Foray`.
2. Create a new DWORD value called "LogLevel".
3. Set LogLevel's value to **3** (this level captures ALL Information, Errors, and Debug Trace). ![logLevel.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/logLevel.png)
4. Open **Task Manager**.
5. Under **Processes**, scroll down and locate **slmonitor** (tip: pressing 's' on your keyboard will jump you straight to the s-section of the processes). When you locate slmonitor, click to highlight it and click **End Task**.
6. Back in the top left-hand corner, click **File > Run new task** and click **OK**. ![slmonitor.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/slmonitor.png)

### Disable Logging Manually

To turn the logs back off, set the registry LogLevel value to 0 and restart the *slmonitor* service.

⚠️ Check MFA Policy Settings

If your MFA policy has logs enabled , manually disabling or deleting the registry value will not have an affect. This is because the client will re-receive the setting at the next server synchronization.

---

## Enable Logging with MFA Policy

1. In your MFA Portal, log in and go to the *Policies* tab.
2. On the left-hand side, click on "View All Policies".
3. This will bring up all of your MFA policies. Next to the policy/group of computers you wish to enable MFA client logs on, click "Edit".
  - **Note:** If you have more than the one policy, it's important to know that the GlobalDefault policy will not  enable logs for other policies. The other policies will have to be set separately.
4. In the new policy editor window, click on the **General** tab.
5. Set **Log Level** to "3 - Everything".
6. (Optional) Check **Log Scope** and select the activity you wish to capture. Typical log gathering consists of the options marked in the example.
7. (Optional) Check **Log Folder Size** and set the value to limit the size of your log file(s). The default is 1024 kb.
8. Finally, click **Save** when finished. The clients will automatically synchronize and pull their new instruction to begin logging over time.
  - **Note:** The default auto-synchronization time is 2 hours.

![generalTab.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/generalTab.png)

### Disable Logging with MFA Policy

If you use an MFA policy to enable client logging, you must use the policy to turn them off.