Monitor/Mirror Firewall to Migrate Rules

Hi Forum,

i want to migrate from Sophos XG to Mikrotik (Firewall-Rules).

The Sophos is a mess… can i use a Mikrotik Router as a “Mirror Port” to get Statistics or Logs, which Devices communicate with each other?
Let this Setup run for 1-2 weeks to get the Toptalkers or the most common Rules.

in my mind is to configure a external syslog server and visualize by grafana or something else.

But also Excel could be fine to do the basic. (Perhaps the Logfiles are to huge).

Best Regards,
YAN