I have firewalld installed in a remote CentOS server. When I log into the server over the internet as root, I type the following command to access the firewalld logs:
journalctl --output=json-pretty UNIT=firewalld.service
The result is a few records indicating when the service was turned on, etc.
How do I get the list of attempts that remote users tried to connect with the server? Including ip addresses, whether or not they where blocked by firewalld, what they were requesting, what ports, etc.