Add culprit and message to event json data