When looking at service usage data in Audit there are various users showing up as unknown.
Unknown users are displayed, when they have a user IP but no information in the Username field