diff --git a/docs/content/_index.md b/docs/content/_index.md
index 3245737..ef727c2 100644
--- a/docs/content/_index.md
+++ b/docs/content/_index.md
@@ -33,6 +33,7 @@ The [5 minute tutorial setup]({{< relref "tutorial/_index.md" >}}) gives you a f
 * Maintainable implementation in Go
     * [x] Cross platform
     * [x] Type safe & testable code
+* Flexible, detailed & structured [logging]({{< ref "configuration/logging.md" >}})
 
 ## Contributing
 
diff --git a/docs/content/configuration/logging.md b/docs/content/configuration/logging.md
index ecd81a4..d74b0e8 100644
--- a/docs/content/configuration/logging.md
+++ b/docs/content/configuration/logging.md
@@ -3,6 +3,102 @@ title = "Logging"
 weight = 90
 +++
 
-{{% alert theme="warning" %}}Under Construction{{% /alert %}}
+zrepl uses structured logging to provide users with easily processable log messages.
 
-See {{< sampleconflink "random/logging.yml" >}}.
+## Configuration
+
+Logging is configured in the `global` section of the [configuration file]({{< relref "install/_index.md#configuration-files" >}}).<br/>
+Check out {{< sampleconflink "random/logging.yml" >}} for an example on how to configure multiple outlets:
+```yaml
+global:
+  logging:
+    OUTLET_TYPE:
+      PARAM: VAUE
+      ...
+    OUTLET_TYPE:
+      ...
+jobs:
+  ...
+```
+**Note**: Currently, only one instance of an outlet type can be instantiated {{< zrepl-issue 20 >}}
+
+{{% notice info %}}
+Output to **stderr** should always be considered a **critical error**.<br />
+Only errors in the logging infrastructure itself, e.g. IO errors when writing to an outlet, are sent to stderr.
+{{% / notice %}}
+
+## Building Blocks
+
+The following sections document the semantics of the different log levels, formats and outlet types.
+
+### Levels
+
+| Level | SHORT | Description |
+|-------|-------|-------------|
+|`error`|`ERRO` | immediate action required |
+|`warn` |`WARN` | symptoms for misconfiguration, soon expected failure, etc.|
+|`info` |`INFO` | explains what happens without too much detail |
+|`debug`|`DEBG` | tracing information, state dumps, etc. useful for debugging. |
+
+Incorrectly classified messages are considered a bug and should be reported.
+
+### Formats
+
+| Format | Description |
+|--------|---------|
+|`human` | emphasized context by putting job, task, step and other context variables into brackets before the actual message, followed by remaining fields in logfmt style|
+|`logfmt`| [logfmt](https://brandur.org/logfmt) output. zrepl uses [github.com/go-logfmt/logfmt](github.com/go-logfmt/logfmt).|
+|`json`  | JSON formatted output. Each line is a valid JSON document. Fields are marshaled by `encoding/json.Marshal()`, which is particularly useful for processing in log aggregation or when processing state dumps.
+
+### Outlets
+
+Outlets are ... well ... outlets for log entries into the world.
+
+#### **`stdout`**
+
+| Parameter | Default   | Description |
+|-----------| --------- | ----------- |
+|`level`    | *none*    | minimum [log level](#levels) |
+|`format`   | `human`   | [format](#formats) |
+
+Writes all log entries with minimum level `level` formatted by `format` to stdout.
+
+#### **`syslog`**
+
+| Parameter | Default   | Description |
+|-----------| --------- | ----------- |
+|`enable`   | false     | boolean     |
+|`format`   | `human`   | [format](#formats) |
+|`retry_interval`| 0 | Interval between reconnection attempts to syslog  |
+
+Writes all log entries formatted by `format` to syslog.
+On normal setups, you should not need to change the `retry_interval`.
+
+#### **`tcp`**
+
+| Parameter | Default   | Description |
+|-----------| --------- | ----------- |
+|`level`    | *none*    | minimum [log level](#levels) |
+|`format`   | *none*   | [format](#formats) |
+|`net`|*none*|`tcp` in most cases|
+|`address`|*none*|remote network, e.g. `logs.example.com:10202`|
+|`retry_interval`|*none*|Interval between reconnection attempts to `address`|
+|`tls`|*none*|TLS config (see below)|
+
+Establishes a TCP connection to `address` and sends log messages with minimum level `level` formatted by `format`.
+
+If `tls` is not specified, an unencrypted connection is established.
+
+If `tls` is specified, the TCP connection is secured with TLS + Client Authentication.
+This is particularly useful in combination with log aggregation services that run on an other machine.
+
+|Parameter|Description|
+|---------|-----------|
+|`ca`|PEM-encoded certificate authority that signed the remote server's TLS certificate|
+|`cert`|PEM-encoded client certificate identifying this zrepl daemon toward the remote server|
+|`key`|PEM-encoded, unencrypted client private key identifying this zrepl daemon toward the remote server|
+
+{{% notice note %}}
+zrepl uses Go's `crypto/tls` and `crypto/x509` packages and leaves all but the required fields in `tls.Config` at their default values.
+In case of a security defect in these packages, zrepl has to be rebuilt because Go binaries are statically linked.
+{{% / notice %}}
diff --git a/docs/layouts/shortcodes/zrepl-issue.html b/docs/layouts/shortcodes/zrepl-issue.html
new file mode 100644
index 0000000..f0338d3
--- /dev/null
+++ b/docs/layouts/shortcodes/zrepl-issue.html
@@ -0,0 +1,5 @@
+{{if .Get 0 }}
+<a href="https://github.com/zrepl/zrepl/issues/{{.Get 0}}" target="_new" >(Issue #{{.Get 0}})</a>
+{{else}}
+{{.missingParameter}}
+{{end}}