Only Global Admins or Restricted Admins with elevated View and Manage privileges can take this action.
Typically, host names are unique within a deployment. However, in some special cases a site requires that its deployment use Duplicate Host Names. If so, each host must be defined in a separate entity for it to be identifiable in analysis tools and reports. To use duplicate host names, a LogRhythm administrator must first set up the entities, and then configure the agent to register with the correct host and entity.
Before you start any agent on a host with a duplicate name:
- On the main toolbar, click Deployment Manager.
Click the Entities tab and create an entity for each host with a duplicate name.
This generates a unique EntityID in the LogRhythmEMDB Entity table for each one. For example: if you have two hosts named HOSTXYZ, create EntityA which generates EntityID=5 and create EntityB which generates EntityID=6.
- To obtain the EntityIDs, open the LogRhythmEMDB Entity table or run the following query against the LogRhythmEMDB:
select * from Entity
Locate the new entities in the Name column and note each one's EntityID.
- For each host, open the agent configuration file C:\Program Files (x86)\LogRhythm\LogRhythm System Monitor\config\scsm.ini and add the EntityID parameter to the General section. If there is no General section in file, define it like this:
- Save the scsm.ini file.
- Start the System Monitor Agent using Windows Services.
- In the Client Console, click Deployment Managaer on the main toolbar
- Click the System Monitors tab.
- Select the new agent.
- Right-click the grid, click Actions, and then click Register.
- In the Deployment Manager, click the Entities tab.
Expand the entities and verify the host record appears in the appropriate entity.If your deployment uses duplicate host names without following this procedure, you will encounter a warning message that contains the words: failure to identify a unique host record.