Hello,
eStreamer can't output events with RA VPN failed authentication. (Event type 1004 subtype 5)
Events with correct authentication (VPN) and CONNECTION STATISTICS stream normally. (Events type 1003, subtype 1 and Events type 1004, subtype 8,9). From FMC I can see events with failure authentication in Device->VPN troubleshooting.
Tried outputs in various formats (cef, json, splunk) have got the same result (without failure authentication).
Does it someone faced with the same problem?
