There are two possible values for Source:

  • “System” (the App Control Server or a server component)
  • computer name (indicating the event came from an App Control Agent on the named computer)