Firewall log is logging as expected when enabled. Device is rooted (before and after upgrade.)