diff --git a/third-party/thrift/src/thrift/lib/cpp2/server/LoggingEvent.h b/third-party/thrift/src/thrift/lib/cpp2/server/LoggingEvent.h
index d8d52e17771e78..26140fe91cac13 100644
--- a/third-party/thrift/src/thrift/lib/cpp2/server/LoggingEvent.h
+++ b/third-party/thrift/src/thrift/lib/cpp2/server/LoggingEvent.h
@@ -203,7 +203,12 @@ class LoggingEventRegistry {
   virtual ~LoggingEventRegistry() {}
 };
 
-enum class CertIPResult { SKIPPED, MATCHED, MISMATCHED };
+enum class CertIPResult {
+  SKIPPED,
+  MATCHED_ENFORCED,
+  MATCHED_UNENFORCED,
+  MISMATCHED
+};
 
 namespace detail {
 THRIFT_PLUGGABLE_FUNC_DECLARE(
diff --git a/third-party/thrift/src/thrift/lib/cpp2/server/LoggingEventHelper.cpp b/third-party/thrift/src/thrift/lib/cpp2/server/LoggingEventHelper.cpp
index 6e1ce8e9c7e192..447b003188bbd8 100644
--- a/third-party/thrift/src/thrift/lib/cpp2/server/LoggingEventHelper.cpp
+++ b/third-party/thrift/src/thrift/lib/cpp2/server/LoggingEventHelper.cpp
@@ -46,8 +46,11 @@ void maybeLogTlsPeerCertEvent(
     case CertIPResult::SKIPPED:
       THRIFT_CONNECTION_EVENT(tls.cert_ip_skipped).log(context);
       return;
-    case CertIPResult::MATCHED:
-      THRIFT_CONNECTION_EVENT(tls.cert_ip_match).log(context);
+    case CertIPResult::MATCHED_ENFORCED:
+      THRIFT_CONNECTION_EVENT(tls.cert_ip_match_enforced).log(context);
+      return;
+    case CertIPResult::MATCHED_UNENFORCED:
+      THRIFT_CONNECTION_EVENT(tls.cert_ip_match_unenforced).log(context);
       return;
     case CertIPResult::MISMATCHED:
       THRIFT_CONNECTION_EVENT(tls.cert_ip_mismatch).log(context);