[CF1] linux log note (#25586)

Author: deadlypants1973

src/content/docs/cloudflare-one/connections/connect-devices/warp/troubleshooting/warp-logs.mdx

@@ -138,7 +138,7 @@ The `warp-debugging-info` folder may contain multiple versions of the same log,
 In timestamped logs such as `daemon.log`, the most recent events will appear at the end of the file.
 :::
 
-#### Log retention window
+### Log retention window
 
 Each WARP log file (such as `connection_stats.log`, `dns_stats.log`, `daemon.log`, `boringtun.log`, `daemon_dns.log`, `dex.log` and `captive-portal.log`) is limited by size and age:
 
@@ -150,6 +150,16 @@ Log files may include data from up to 96 hours (four days) prior to when `warp-d
 
 Always check the timestamps at the end of each log file to verify the time range covered by the diagnostic archive.
 
+:::note[Linux log behavior]
+
+On Linux, the WARP daemon logs are written to the system logs by the `warp-svc` service.
+
+If you need to adjust the maximum log level or filter what gets logged, you can configure the WARP `systemd` unit file using the [`LogLevelMax=` option](https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#LogLevelMax=).
+
+Cloudflare WARP does not provide an official method to configure logging levels during the installation process.
+
+:::
+
 ## iOS/Android/ChromeOS
 
 ### Collect logs