I am using MWG 8.1.5 and RSA Netwitness 10.6.6 SIEM. I noticed that not all MWG events come into siem. For example I visited a web site multiple times. The site was always loged in the MWG log, but that log did not always arrive into siem. I also did a tcpdump on the siem server to see if the packet containing that info came into siem or not. Sometimes it did, sometimes it didn't (like I mentioned before MWG log always contained the information that the site was visited). I would like to know if there could be something wrong with MWG, or this problem is entirelly on the siem's side?