As far as I have found out, you do not get mac in the connection logs, only sourceIP, DestIP, SourcePort, DestPort and username if you using hotspot. This can be graphed with Splunk/Graylog or other tools. https://forum.mikrotik.com/viewtopic.php?t=117509 I am able to get mac, sourceIP and destIP. ...