The event wrapper should have a field for a causation identifier (not mandatory) which can be used to store the identifier of what caused the event to be written.
This is most likely to be a command unique identifier but could also be a notification unique identifier if the system is set up such that events can trigger events.
(I'm not convinced this latter is a good design but am not going to pre-emptively eliminate it as a possibility)
The event wrapper should have a field for a causation identifier (not mandatory) which can be used to store the identifier of what caused the event to be written.
This is most likely to be a command unique identifier but could also be a notification unique identifier if the system is set up such that events can trigger events. (I'm not convinced this latter is a good design but am not going to pre-emptively eliminate it as a possibility)