HI Jeon,
Please clarify if you want to block a mac address through UPM or log the event that a mac address is blocked.
If you want to log the event, please provide information about how the mac address is blocked? is it through ACL?
Looking forward to your answers!