details of the event log when running detection abuse

Hello, As I can identify the specific account that triggers an abuse policy server. Currently I have the parameters LOG of events in " detailed" but when a abuse detection is activated have only the IP information from where abuse was generated , but have no way to know that is generating the problem. Is there any way to identify the specific account that is generating the problem.

Best Regards,