This is due to default charon-logging.conf making them go to auth.log rather than messages which our "show log" command uses.
Should be working now that we've added syslog forwarding to journald.