I assume the log is from the originating site. This seems to confirm that your security policy is working.
Is there a log on the security policy at the hub site that shows the traffic has arrived?
If not, confirm the vpn configuration has no configured proxy id that would restrict the use of the tunnel.
If it has arrived here look at the policy logs on the remote site to confirm the session is setup there.