Many providers want to store the NAT logs for compliance purposes.

On Microtik there is a UI where you can enable syslog but that is heavy and logs all packets. We only need NAT syslog for new connections.

Use this

[admin@MikroTik] > 

/ip firewall filter chain=forward action=log connection-state=new protocol=tcp in-interface=LAN log-prefix="nat"