Linux machine apears as localhost on microsoft defender for endpoint

[arestas]

Hello,

We have a few linux machines where the device name appears as localhost.

We would like to change this but we aren’t sure how this can be achieved.

Can anyone help?

Regards,

[#2]

@arestas Can anyone help please?

[#3]

Hi @arestas,

The device name information is stored in /etc/Hostname. Please try the hostnamectl command to change the device name.

Please let me know if this helps answer your question.

[#4]

@arestas, did you get this resolved?

It's a matter of making sure the linux hosts is configured correctly, not so much an issue with Defender. The SIEM syslogs probably show the hostname as localhost also.

I had this misconfiguration on a couple of machines, resolved by making sure the /etc/hosts entries are configured correctly.