Moved provisionally to SIEM for better handling. Moderator
What kind of data source created the events? Some data source logs may not have that information. Best bet is to look at the packet tab and see if the data is even available. Assuming that the data is available, you may need to create a custom parser for it if the portions of the data you want aren't parsing.