You can view Tunnel Inspection logs themselves
or view tunnel inspection information in other types of logs.
GRE,
Non-Encrypted IPSec, and GTP-U Protocols
When
there is a TCI traffic rule match, GRE, IPSec, and GTP-U protocols
are logged in the Tunnel Inspection log with the Tunnel log type,
the matched protocol, and the configured Monitor name and Monitor
tag (number).
When there is no TCI rule match, all protocols are logged
under Traffic logs.
VXLAN Protocol
When
there is a TCI traffic rule match, VXLAN protocol is logged in the
Tunnel Inspection log with the Tunnel (VXLAN) log type, the configured
Monitor name, and the Tunnel ID (VNI).
In the Traffic log
for the inner session, the Tunnel Inspected flag indicates a VNI session.
The Parent Session is the session that was active when the inner session
was created so the ID might not match the current Session ID.
When there is no TCI rule match, VNI sessions are logged
in Traffic logs with the UDP protocol, source port 0, and destination
port 4789 (the default).