Hi,
Please share your configuration from the SRX.
- What is the output of "show route <SIEM IP>" ?
- Is that interface through which SIEM is reachable, part of a VR ?
- What is the source address being used for stream mode logs ?
Regards,
Sahil Sharma
---------------------------------------------------
Please mark my solution as accepted if it helped, Kudos are appreciated as well.