Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Linux machine apears as localhost on microsoft defender for endpoint

Copper Contributor


We have a few linux machines where the device name appears as localhost.

We would like to change this but we aren’t sure how this can be achieved.


Can anyone help?


3 Replies

Hi @arestas,


The device name information is stored in /etc/Hostname. Please try the hostnamectl command to change the device name.


Please let me know if this helps answer your question.


@arestas, did you get this resolved?

It's a matter of making sure the linux hosts is configured correctly, not so much an issue with Defender. The SIEM syslogs probably show the hostname as localhost also.

I had this misconfiguration on a couple of machines, resolved by making sure the /etc/hosts entries are configured correctly.