Add Origin Hosts or Impacted Hosts as Known Hosts

 To add an origin or impacted Host from a log to an entity as a known Host

1. After running an Investigation or SecondLook search, select a log in the search results grid.

2. Right-click the selection, and then select Add Origin Host as Known Host or Add Impacted Host as Known Host.
   The Select Entity dialog box appears.

3. Select the entity where you want to add the Host.
   The Host window appears.

4. Enter or update information if necessary. For more information, see Add Host Records Manually.

5. Click OK.