Today syslog events only show when users log into the access/web console, or admin events.
Would be useful to have the granular details in the reports section also sent in syslog:
when a session stars, by who, endpoint
when a session ends, reason for disconnect
user invites external user or team member