Ok, I found a solution for the missing log.
fail2ban's default location for the log is SYSLOG, but I can't find documentation on what that means, exactly. This used to generate fail2ban.log in /var/log - it no longer does.
So I created /etc/fail2ban/fail2ban.local with the following content...