Suricata and TLS Termination: how to log the original src and dst

Now I see it as azfw-forwarded is that what you refer to?