Eventlog UserID don't contain SID but user name

View thread