Syslog : Name of the rule ? And log traffic without rule checked.

[ExSL]

Hello,

We're trying to get network log. We would like to know to see what rules block traffic. We install a syslog and nothing. Nor more information.
So we decide to uncheck all "syslog" box on the L3 firewall. And we keep receiving log.

Any help ?

Best regards,

[ww]

You need to select flows at the syslog settings. Then you get all flows.  And additional all the firewall logs  from the rule you enabled for logging

[alemabrahao]

I don't understand what you want, do you want to receive messages via syslog or not?

[ExSL]

I want to receive log from a specific rule.

[alemabrahao]

Have you checked if there is any Hit count?

[ExSL]

We found the issue, when we turn on one rule, we have to filter.
Like "tail -f message | grep firewall" otherwise we've a lot of useless "flow" logs.