Events are not parsed correctly, primarily noticed in the Username field.
The Syslog format of WELF is not supported by our Juniper VPN Collector
Per the Juniper VPN Collector PDF, you must use the Standard Syslog format option.
The reason we do not support WELF is because this format never gained broad acceptance as an industry standard and has a number of limitations.
It is likely that WELF will be replaced by the Common Event Expression (CEE) standard that is currently in work and supported by the United States Federal Government.