diff --git a/Parsers/ASimAuthentication/Parsers/ASimAuthenticationNative.yaml b/Parsers/ASimAuthentication/Parsers/ASimAuthenticationNative.yaml
index ee2e68e54a..1da5c892a1 100644
--- a/Parsers/ASimAuthentication/Parsers/ASimAuthenticationNative.yaml
+++ b/Parsers/ASimAuthentication/Parsers/ASimAuthenticationNative.yaml
@@ -26,7 +26,7 @@ ParserQuery: |
     ASimAuthenticationEventLogs  | where not(disabled)
       | extend
           User =  TargetUsername,
-          Src = coalesce (SrcDvcId, SrcHostname, or SrcIpAddr),
+          Src = coalesce (SrcDvcId, SrcHostname, SrcIpAddr),
           IpAddr=SrcIpAddr,
           LogonTarget= coalesce (TargetAppName, TargetUrl, TargetHostname),
           Dst = coalesce (TargerDvcId, TargetHostname, TargetIpAddr, TargetAppId,TargetAppName),