Yeah, I hear ya. For those unmatched events, if it's a supported device you can export a report and send it to SolarWinds and they will upgrade the connector for it; I have done that several times with the Fortinet connector.
It just seems that LEM has so much potential in playing a significant role as part of an IDS/IPS solution; however, I am still struggling to tap that potential.