For me I found that the TA_pfsense searches for openVPN connections was not returning all the VPN user log entries..
I discovered that it works just fine with a username, however some of my usernames are their e-mail addresses so contain @-. which were not part of the REGEX..
here's my updated REGEX entry "transforms.conf" file:
[openvpn_auth_ok]
CLEAN_KEYS = 0
FORMAT = user::$1 src::$2 vendor_action::$3
REGEX = :\s+([\w\@\-\.]+)/([^:]+):\d+\s+(MULTI_sva)
... View more