CIS not logging every event

I have a global rule “Allow and log Ip Out Any Any Any”, but it does not log every event.
Some connections shown in “Active Connections” are not in the log.



CIS uses selective logging, where it does the selection. Logging improvements are included several places in the wishlist, but don’t know the status or plans.

Thanks sded,but the way my event log looks, I cannot see what sort of logic does CIS use for selective logging.
Like, I have been browsing for a while and in the event log I only have a few connections thru port 80??!

I hope they fix it soon.

Thanks again


Make sure that you have set option Log as a firewall event if this rule is fired in global rules and unset option Disable Firewall logging in CIS Settings