With NIS2 in EU region we need some sort of central logging of security incidents like failed logins etc. I think this should be VERY easy to accomplished with separate CEF formatted log , the IDEA is already there https://community.microfocus.com/img/gw/groupwise/i/ideas/gw-siem-integration .
We asking for this for many years, but now we running out of time.
David