Is it possible to define which user ran which transformation (maybe using the http://host: port/kettle/status/) ?
usernames (and passwords) are defined in kettle.pwd.