For NCM device families under the information tab/Configuration Notification Trap Settings there is a Event Source Table that can be modified.
This table is specific to Juniper devices is a way of mapping Junipers trap format information as they actually used numeric codes to represent where the config change was initiated from.
It would look like the following:
What happens is that Juniper sends the SOURCE of the syslog trap as an integer instead of the actual source. The Event Source Table allows you to map the integer value to a text value for example:
So the Source would show CLI if the value was 1 instead of just showing the value 1.