Add and Remove a Tag for a Host

1. Log in to the LogRhythm NDR UI.

2. To add a tag for a host, click the Hosts tab. In the drop-down menu, click All Hosts.
   The All Hosts page appears.

3. On the All Hosts page in the host_uuid column, click the green tag update icon next to the host for which you want to add a tag.
   The Host Tag text box appears.

4. In the Host Tag text box, enter one of the Pre-Defined Host Tags which you want to add.

5. Click Update.
   The page refreshes.

6. To view tags for a host, click the host_uuid for which you just added the tag.
   The Host Details page appears. Tags appear in the Host Activity section next to the Entity Host Tag field.

7. To remove a tag, click X on the tag name.
   The tag is now deleted from the Host Tag field.

Pre-Defined Host Tags

The following is a list of accepted host tags that can be inserted in step 4 above.

• "Custom_Device"

• "Database"

• "DHCP_Server"

• "DNS_Server"

• "Domain_Controller"

• "File_Server"

• "Firewall"

• "Gateway"

• "Load_Balancer"

• "Medical_Device"

• "Mobile_Device"

• "PC"

• "VoIP_Phone"

• "Vulnerability_Scanner"

• "Web_Proxy_Server"

• "Web_Server"

• "Other"