Need to set up logging on a 2011UiAS-2HnD.

Looking for the most robust logging on the firewall itself.

Do it in system - logging. Save logs to USB stick. Or log remotely to the log server.

In the last couple of router OS versions, you can log each rule of the firewall if you want to . I noticed it in version 6.23 and started to do this myself. The other option is to create log rules identical to drop rules just above the drop rule.