Why Does't Windows Security Auditing include the IP?

From: ryan (rmurphy_at_employocity.com)
Date: 05/30/03 

Date: Fri, 30 May 2003 13:13:29 -0500

of the offending party in the event log when it does include machine and
domain? Am I the only one that thinks this would be a good idea?