Okay, maybe not everything, but RSA needs to put some serious effort into beefing-up the list of "officially supported" event sources.
Yes, I took the UDS class and no - I don't have the time to wrap anything but the simplest device.
Of course there are service offerings - UDS for a fee if you will, but frankly this concept is not only offensive given the cost of the enVision product but also overtly counter-intuitive. You would think that expanding device support would be a no-brainer.
From what I have read on this forum the only thing RSA is concerned with is their standing in the "Magic Quadrant" - perhaps a call to Gartner is in order.........................
Have you seen the event source roadmap through 2008? https://community.emc.com/community/envision
Please use the Request a Device section to specifically list the top 3-5 devices you would like to see supported. Please list them separately so that others can show their interest too via assigning "kudos". If you see some already listed that you would like, please give them kudos. That enables us to see the volume of requests.
As for the Gartner MQ, it is a key sales tool that prospective customers use to determine which SIEM products to evaluate. It is not really relevant to existing customers, though we know some like to track it, so we've posted it here. The Gartner reports are quite expensive, so we wanted customers to have it for free.