I'm having trouble getting connection event logs to the SEM. I can get them to the NPM syslog. Appears the local facility is 14, which does not exist on the SEM. Has anybody had luck creating additional facilities, or perhaps figured out another way for firepower event logs to show on the SEM?