...
Search Logger 1 for " (ip address) AND deviceProduct=NSM " for about a minute on either side of the DMCA timestamp -- from here you'll get the internal ip address and port. Make sure the port matches the dmca port.
Then search Echo or Splunk for the internal ip address and timestamp to get the MAC address and UTLN