Openvpn traffic monitoring for SOC

I have a simple openvpn infrastructure setup: the authentication is on AD through FreeRadius, and some logging, accounting is done on MariaDB. An easy and connvetional one really. what I would like to have is to monitor in real time (or almost) what the end user is doing (connecting to RDP to jump servers etc ...) after they're connected. The only solution I've found is that that I'd capture all traffic going through tun0 if the source IP is the …

accounting authentication blueteamsec doing easy end end user etc infrastructure logging mariadb monitor monitoring openvpn rdp real real time servers simple soc traffic traffic monitoring