...ok, so I guess this is my fault, because the default log view seems to be "Warning" messages only and I forgot to check other priorities.... which I only remembered *after* I went and dug around on the console and found /var/log/ipsec/latest.log did indeed have entries after all ::)