Add more "$source" to Events

If you rename a device there is a nice event message:

2026-07-08 13:12:03 Hostname changed → switch2.contoso.local (MyUsername)

It’s very nice to see who changed what. But adding a device doesn’t show who:

2026-07-08 13:05:04 Device switc2.contoso.local has been created

Can we add the user to this (and other) event messages?

With $source

Without $source

2 Likes