Jonny,There might be a way to do this.. but it will take some testing. Make sure that you have the settings for your lookups to pass incident dataYou will need to increase the logging on the Enforce server and then look at some of the logs for the information. 1. System > Servers and Detectors > Logs Change the Enforce server Log settings to - Custom Attribute Lookup Logging2. Go to an Printer based incident (do this on a few different events) Click on the button to Lookup Attributes3. System > Servers and Detectors > Logs Change the Enforce server Log settings to - Restore Default Logging4. Pull the logs from the Enforce Server (24Hours Only) Look in the IncidentPersister or other log.. you will see an attribute list of all of the details in the events. It should have the Attribute=value for each setting. Find the one with the printer name and use that variable.