Logging single firewall rule

Yes, just adding option log '1' to a rule definition seems to work, but boy, is the firewall system a nightmare to configure. I've decided just to script it from entries read from a database. It just appears easier to update.