diff --git a/source/extensions/transport_sockets/tls/ssl_socket.cc b/source/extensions/transport_sockets/tls/ssl_socket.cc
index ba408c2d417f..4f0fa0ae4554 100644
--- a/source/extensions/transport_sockets/tls/ssl_socket.cc
+++ b/source/extensions/transport_sockets/tls/ssl_socket.cc
@@ -221,7 +221,9 @@ void SslSocket::drainErrorQueue() {
                                         ERR_func_error_string(err), ":",
                                         ERR_reason_error_string(err)));
   }
-  ENVOY_CONN_LOG(debug, "{}", callbacks_->connection(), failure_reason_);
+  if (!failure_reason_.empty()) {
+    ENVOY_CONN_LOG(debug, "{}", callbacks_->connection(), failure_reason_);
+  }
   if (saw_error && !saw_counted_error) {
     ctx_->stats().connection_error_.inc();
   }