Hmm, you mean "%I" (request ID)? (--> https://wiki.freeradius.org/config/run_time_variables) How would you include it? The ID is present neither in my auth nor reply/reject log. I tried using "header = ..." but Freeradius just started rejecting everything after that. Ideally one would have one log entry (or even inject into SQL), with one entry per event (all the info present in the request + the decision whether it was accepted or rejected...) --- Auth detail: detail auth_log { filename = ${radacctdir}/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d permissions = 0600 suppress { User-Password } } Example: Thu Mar 9 18:46:57 2017 Packet-Type = Access-Request User-Name = '50-26-xx-xx-xx-xx' Service-Type = Framed-User Called-Station-Id = '20-B3-xx-xx-xx-xx' Calling-Station-Id = '50-26-xx-xx-xx-xx' NAS-Identifier = 'SWITCH1' NAS-Port = 131 NAS-Port-Type = Ethernet NAS-Port-Id = 'ge.3.27' NAS-IP-Address = 192.168.xx.xxx Message-Authenticator = 0xXXXXXXXXXXXXXXXXXXXXXXXXXX --- Reply detail: detail reply_log { filename = ${radacctdir}/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d permissions = 0600 } Example: Fri Mar 31 02:08:54 2017 Packet-Type = Access-Accept Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = '100' Reply-Message = 'ACCEPTED MAC address 70-8b-xx-xx-xx-xx, VLAN 100' --- Reject detail: detail reject_log { filename = ${radacctdir}/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reject-detail-%Y%m%d permissions = 0600 } Example: Fri Mar 31 09:35:56 2017 Packet-Type = Access-Reject Fri Mar 31 09:36:27 2017 Packet-Type = Access-Reject Fri Mar 31 09:36:27 2017 Packet-Type = Access-Reject Thanks, Marki