Firewall in Safe Mode - Firewall Event always empty

Is it normal that the firewall event log is always empty … when the firewall is configured in safe mode ?
Before CIS 5.3 it was not the case … for me …
Thanks
Pieteke

It will only show events for applications not whitelisted.