When routes are blocked during Egress, no entry in envoy logs


Version 1.0.7. Cannot upgrade to 1.1.3 because of https://github.com/istio/istio/issues/9504.
I have noticed that sometimes when a route is blocked because it is missing a Service Entry or Service Entry/Virtual Service combo, sometimes I see an entry with NR in the envoy access logs, but a lot of times I do not. This is for both http or tcp or tcp/grpc services. Mixer logs also seem to only have http, but I think that is because of the default stdio config.
How can I get these logs to show up?