The sender information generated by the network monitor servers is seem as the ip address.
Is there a definition that can be made for this part to appear as username?
Release : 15.8
Please ensure the below has been configures i.e.
Go to System > Servers and Detectors > Logs > configuration tab you will need to configure the Enforce Server to start collecting the "Custom Attribute Lookup Logging".
Click on System > Incident Data > Lookup Plugins > Lookup Parameters button
Select the Incident and sender parameters
Save the settings