This field identifies which HiGuard system component, such as a specific sensor or wireless security appliance, generated the event notification. It lets an admin trace an alert back to the exact piece of infrastructure that detected the issue, especially useful in a deployment with multiple sensors. For example, it might contain an identifier string naming a particular access point or HiGuard sensor unit that flagged the event.