Problem statement
We have selected all the event categories, including Login - Success event, for the streamed logs in our log stream integration, but for some reason, the success login (s) type logs aren’t coming through.
Solution
Removing all the fitters in the Log stream helped receive s-type logs again. Once the Log Streaming was working as expected, we reenabled the Login - Success event, and the stream continued working as expected. It appears there is a use case where the log stream filters may not work correctly, but re-setting it helps to recover it.