Is it possible to redirect EPA events to a separate log? In order to easily see users that are passing/failing them?

I don't think so but if you use a syslog server, you can usually create various logs based on filter, I do that with Kiwi syslog.

They are recorded in syslog at error for failures and debug for successes. You would have to develop a filter for sure.

we dump everything to splunk, will look at how to filter there

On Netscaler console it will show you EPA failures on gateway insights