Using topology SRX1-->SRX2-->Security Director, the SRX2 is not passing the logs of SRX1 to the Security Director.

Logs sent by the device connected to SRX is not being received on the Security Director.

On the SRX, a security policy should be present to allow syslog traffic.

Syslog is UDP 514.

The security policy should be configured to allow "junos-syslog" application.

The application "junos-rsh" is for TCP 514.

Configuration example:

set security policies from-zone trust to-zone untrust policy permit-all match source-address SRX-1-interface-IP
set security policies from-zone trust to-zone untrust policy permit-all match destination-address SD-cloud-IP
set security policies from-zone trust to-zone untrust policy permit-all match application junos-syslog
set security policies from-zone trust to-zone untrust policy permit-all then permit