Hi, TBH, iu cant recall if expansions work for that secion in radiusd.conf - if theres a quirky bug it wont get fixed in 2.1.12 but for logging there are 2 ways that do work....and should work fine 1) use the 'detail' module 2) use linelog for the details module - i think you are using this(!) ? you should be looking at modules/detail.log file - as thats the file that is actuslly used for auth_log et al and if %{Virtual-Server} expansion doesnt work there - easy, just create a new detail entry eg eduroam_auth_log and call that instead of auth_log in relevant section of the virtual server - and do the same for the other calls to log functions eg detail eduroam_auth_log { detailfile = ${radacctdir}/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d detailperm = 0600 suppress { User-Password EAP-MSK EAP-EMSK EAP-Message MS-MPPE-Recv-Key MS-MPPE-Send-Key MS-MPPE-Encryption-Policy MS-MPPE-Encryption-Types } } ..for linelog, simply look at the modules/linelog file and configure as required....or make a new one eg linelog eduroam-linelog { <put config here!> } and then call linelog in relevant place to capture required bits - linelog is generally better as the output can be nicely customised to contain exactly the stuff needed in format needed... obviously there are many other methods - eg using the buffered-sql virtual server and copying detail output asynchronously to an SQL server so you have logs in database format (great for searching) some of this may only be applicable to 2.2.x - but thats what you should be running as a minimum these days (and even that is around end of support time) alan