Syslog shows no events from Advanced Threat Protection