https://community.sonicwall.com/technology-and-support/discussion/comment/21516#Comment_21516 So after a bit of digging, it appears I have to use the "Firewall Action" log template… (View Post)