Can we also capture:
1. The IP addess where the operation originated
2. The administrative interface through which the operation was received