The following limitations apply to logging:
During a situation or time when there is excessive traffic through the Screen, not all packets are logged.
This logging limitation is an isolated instance and depends on how fast your system runs.
Decrypted packets are logged, but SKIP certificate IDs are not logged.
Only the active system logs packets.
If the active HA cluster Screen fails, its logs become inaccessible, and the new active HA cluster Screen begins logging the packets.