Hi,
ok, I referred to the empty field for the container ID on the search result tab - this refers to a control parameter, I guess. So for this you should debug the control paramter extractor to analyze if extraction is done in TM.
You are right the field Container ID on the Event Messages tab should refer in that case to DATA ID. For this you should debug the expected event extractor function to check if the extraction is done correctly.
If you are sure that the extraction is done correctly, the next step would be to check if the values are peristed correctly in EM (tables /SAPTRX/EH_CNTRL resp. /SAPTRX/EH_EXPEV).
Best regards, DAniel