an Entity references as follows:
reference to the source of the alert. For example, it could be a user of an application, a device, or a service