Hi,
In stream mode logging, the traffic logs (RT_FLOW) are sent directly from the PFE to the syslog server in order to offload the RE from processing these.
Hence you will not be able to see them in local files on the SRX as they are not reaching the RE which is responsible for writing these logs to the files.
Regards,
Sahil Sharma
---------------------------------------------------
Please mark my solution as accepted if it helped, Kudos are appreciated as well.