@manu thanks! I tried before the

tls_dump

flag but but i dont think the tls config is related. Typically, when enabling verbose, i can see something like "Running Query.." / "Found results for query..." when a query has an output, but in this case i just see the "Running Query" part . To me it seems that the query is just not returning anything so it has nothing to log. The tls traffic i can see in the very few times that the query returns something seems correct. In your test you keep getting events after some time? In my case, it writes some events at the beginning, then it stops writing.