https://community.cisco.com/t5/network-security/estreamer-vpn-events-with-failure-authentication/m-p/4707077#M1094385 <P>&nbsp;</P><P>Hello,</P><P>eStreamer can't output events with RA VPN failed authentication. (Event type 1004 subtype 5)</P><P>Events with correct authentication (VPN) and CONNECTION STATISTICS stream normally. (Events type 1003, subtype 1 and Events type 1004, subtype 8,9). From FMC I can see events with failure authentication in Device-&gt;VPN troubleshooting.&nbsp;</P><P>Tried outputs in various formats (cef, json, splunk)&nbsp; have got the same result (without failure authentication).</P><P>Does it someone faced with the same problem?</P><P>&nbsp;</P> Fri, 21 Oct 2022 07:50:29 GMT marvel3005 2022-10-21T07:50:29Z https://community.cisco.com/t5/network-security/estreamer-vpn-events-with-failure-authentication/m-p/4707077#M1094385 <P>&nbsp;</P><P>Hello,</P><P>eStreamer can't output events with RA VPN failed authentication. (Event type 1004 subtype 5)</P><P>Events with correct authentication (VPN) and CONNECTION STATISTICS stream normally. (Events type 1003, subtype 1 and Events type 1004, subtype 8,9). From FMC I can see events with failure authentication in Device-&gt;VPN troubleshooting.&nbsp;</P><P>Tried outputs in various formats (cef, json, splunk)&nbsp; have got the same result (without failure authentication).</P><P>Does it someone faced with the same problem?</P><P>&nbsp;</P> Fri, 21 Oct 2022 07:50:29 GMT https://community.cisco.com/t5/network-security/estreamer-vpn-events-with-failure-authentication/m-p/4707077#M1094385 marvel3005 2022-10-21T07:50:29Z