When doing a prerouting rule with logging, the rule isn't showing in show log firewall.
Config:
set firewall ipv4 prerouting raw rule 10 action 'accept' set firewall ipv4 prerouting raw rule 10 log set firewall ipv4 prerouting raw rule 10 protocol 'icmp'
show log firewall
vyos@vyos# run show log firewall -- No entries --
show log
vyos@vyos# run show log | match ipv4 Dec 24 17:47:55 kernel: [ipv4-PRE-raw-10-A]IN=eth0 OUT= MAC=0c:c1:de:7f:00:00:0c:2a:77:49:00:00:08:00 SRC=10.0.1.2 DST=10.0.2.2 LEN=100 TOS=0x00 PREC=0x00 TTL=254 ID=30 PROTO=ICMP TYPE=8 CODE=0 ID=6 SEQ=0
NOTE: The logs are showing when doing `show log firewall ipv4 prerouting'
vyos@vyos# run show log firewall ipv4 prerouting Dec 24 17:47:55 kernel: [ipv4-PRE-raw-10-A]IN=eth0 OUT= MAC=0c:c1:de:7f:00:00:0c:2a:77:49:00:00:08:00 SRC=10.0.1.2 DST=10.0.2.2 LEN=100 TOS=0x00 PREC=0x00 TTL=254 ID=30 PROTO=ICMP TYPE=8 CODE=0 ID=6 SEQ=0
The fix should be as simple as adding PRE to the journalctl regex.