Only Global Admins or Restricted Admins with elevated View and Manage privileges can take this action.
Typically, host names are unique within a deployment. However, in some special cases a site requires that its deployment use Duplicate Host Names. If so, each host must be defined in a separate entity for it to be identifiable in analysis tools and reports. To use duplicate host names, a LogRhythm administrator must first set up the entities, and then configure the agent to register with the correct host and entity.
Before you start any agent on a host with a duplicate name:
-
On the main toolbar, click Deployment Manager.
-
Click the Entities tab and create an entity for each host with a duplicate name.
This generates a unique EntityID in the LogRhythmEMDB Entity table for each one. For example: if you have two hosts named HOSTXYZ, create EntityA which generates EntityID=5 and create EntityB which generates EntityID=6. -
To obtain the EntityIDs, open the LogRhythmEMDB Entity table or run the following query against the LogRhythmEMDB:select * from Entity
-
Locate the new entities in the Name column and note each one's EntityID.
-
For each host, open the agent configuration file C:\Program Files (x86)\LogRhythm\LogRhythm System Monitor\config\scsm.ini and add the EntityID parameter to the General section. If there is no General section in file, define it like this:[General]EntityID=5
-
Save the scsm.ini file.
-
Start the System Monitor Agent using Windows Services.
-
In the Client Console, click Deployment Managaer on the main toolbar
-
Click the System Monitors tab.
-
Select the new agent.
-
Right-click the grid, click Actions, and then click Register.
-
In the Deployment Manager, click the Entities tab.
-
Expand the entities and verify the host record appears in the appropriate entity.
If your deployment uses duplicate host names without following this procedure, you will encounter a warning message that contains the words: failure to identify a unique host record.