Change cursor when hoovering over symbol within "Act" column of normal firewall log to indicate that icon may be clicked.