Consider the following scenario...
1) Search for user "user1" (no quotes).
2) InTrust events are returned.
3) Click the “Where” value which contains an IP address.
4) A blue note appears on the screen:
"Note: Cannot identify a Computer that matches "IP_address". Please select one of the suggested Computers or type a different query"
5) The message then dissapears and the search finishes with typical result message when no results are found:
"Nothing found. Search is finished."