This field holds a free-text summary describing what the wireless security event actually was, accompanying the severity level and sender information in the same trap. Administrators read it to understand the nature of the alert, such as a rogue AP detection or an intrusion attempt, without needing to cross-reference an event code table. For example, it might contain text like "Rogue access point detected on channel 6."