Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Linux machine apears as localhost on microsoft defender for endpoint

Copper Contributor

Hello,

We have a few linux machines where the device name appears as localhost.

We would like to change this but we aren’t sure how this can be achieved.

 

Can anyone help?

Regards,

3 Replies

Hi @arestas,

 

The device name information is stored in /etc/Hostname. Please try the hostnamectl command to change the device name.

 

Please let me know if this helps answer your question.

 

@arestas, did you get this resolved?

It's a matter of making sure the linux hosts is configured correctly, not so much an issue with Defender. The SIEM syslogs probably show the hostname as localhost also.

I had this misconfiguration on a couple of machines, resolved by making sure the /etc/hosts entries are configured correctly.