ATA Gateway SIEM Integration

Hi,

From my understanding, ATA Gateway can be fed in three different ways:

-Port Mirroring

-SIEM

-WEF

Then, if you are using the lightweight Gateway, you do not need Port Mirroring or WEF, however, what are the SIEM logs used for ? I have read that only specific events can be forwarded from the SIEM to the Gateway, is that correct ? What are those events ?

Thank you,

Marc