Running SQL query for ENF event data. Where is the info on the actual USER causing the event?