Forum Discussion

arestas's avatar
arestas
Copper Contributor
Aug 18, 2021

Linux machine apears as localhost on microsoft defender for endpoint

Hello,

We have a few linux machines where the device name appears as localhost.

We would like to change this but we aren’t sure how this can be achieved.

 

Can anyone help?

Regards,

3 Replies

  • mentions1410's avatar
    mentions1410
    Copper Contributor
    Feb 01, 2022
    arestas, did you get this resolved?

    It's a matter of making sure the linux hosts is configured correctly, not so much an issue with Defender. The SIEM syslogs probably show the hostname as localhost also.

    I had this misconfiguration on a couple of machines, resolved by making sure the /etc/hosts entries are configured correctly.
  • Jayronn's avatar
    Jayronn
    Icon for Microsoft rankMicrosoft
    Aug 23, 2021

    Hi arestas,

     

    The device name information is stored in /etc/Hostname. Please try the hostnamectl command to change the device name.

     

    Please let me know if this helps answer your question.