Event messages in callback functions seem to associate the event app ID with timer ID. The first timer created gets a timer ID of zero and events in the callback are get associated with CFE_EVS (APP_ID=0). The second timer gets a TID of 1 so events are associated with CFE_SB (APP_ID=1).

I did not dig through all of the code to prove this and I observed this behavior on a Linux deployment.