Right now, only Session Logs/Published Dashboards/Custom Object Data can be sent to the output by Data Gateways.
It would be great if Windows Event Logs of Runtime Resources could be sent to the output because we can obtain and analyze the event logs at nearly real time by, say, Splunk.
When the Runtime Resources are Physical Desktops, it would be great helpful.