Remaining fix for CEF msg

SignatureID is the msg in this case.