VPN logging

Hello,

I’m new to Mikrotik, but have a router that was configured by my predecessor. We have several VPN tunnels setup and most of them work without a hitch. However we have one tunnel that seems to lose connection with its remote peer, and the only way I have found to re-establish is to use the Flush button under IPsec > Installed SAs tab. Of course, this knocks all of my other tunnels briefly offline too. I would like to troubleshoot exactly what is causing this connection to drop (it happens randomly which makes it really hard to catch), but I don’t understand the logging enough for it to be an effective tool for me.

So, my question is: how do I narrow down a log enough to monitor this specific traffic to see if I can find when and why the connection drops? Is there a way to push the log to a text file?

Thank you.