Many providers want to store the NAT logs for compliance purposes.
On Microtik there is a UI where you can enable syslog but that is heavy and logs all packets. We only need NAT syslog for new connections.
Use this
[admin@MikroTik] > /ip firewall filter add chain=forward action=log connection-state=new protocol=tcp in-interface=LAN log-prefix="nat"