Go to CLI and run logconfig, verify if there is a log subscription called as "IronPort Text Mail Logs" or from the GUI go to System Administration > Log subscription and look if its created
If not create a new subscription or if the name of the subscription is different change the syntax
