Heath 1 Posted October 2, 2018 Share Posted October 2, 2018 Hi All, My ESET platform is spans a large geographical area, is there any built in field I can use to audit (can't see one in report parts) or perhaps a custom field area I can begin to populate with the public IP address from which Agents use to connect into an ERA / ESMC server? Thanks in advance... Heath. Link to comment Share on other sites More sharing options...
ESET Staff MichalJ 430 Posted October 2, 2018 ESET Staff Share Posted October 2, 2018 You can use "remote host" field for that (by default, it is disabled) within the "computers table". Link to comment Share on other sites More sharing options...
Heath 1 Posted October 2, 2018 Author Share Posted October 2, 2018 1 hour ago, MichalJ said: You can use "remote host" field for that (by default, it is disabled) within the "computers table". Thank you MichalJ... Is there a KB article I can follow for how to do this? Cannot find much info via web search or on the ESET website? Is this something done via Webconsole or is this a SQL admins task? Link to comment Share on other sites More sharing options...
ESET Staff MichalJ 430 Posted October 2, 2018 ESET Staff Share Posted October 2, 2018 In "Computers table". in ESMC, just add a specific column "remote host", which is there in the list. Addition of columns, could be triggered by clicking the little cogwheel in the upper right corner of the application. Link to comment Share on other sites More sharing options...
Heath 1 Posted October 2, 2018 Author Share Posted October 2, 2018 (edited) Aha, so simple when you know how ?♂️ One last question...is there any way of refreshing this data field? For some agents the data is good, for others it simply shows either the IP of the computer on which the Agent is installed or, the FQDN of the computer on which the agent is installed? On some Agents it displays an old FQDN name which the Agent used to have before a site renaming task was done on the agent names in the ERA database? Edited October 2, 2018 by Heath Link to comment Share on other sites More sharing options...
ESET Staff MartinK 375 Posted October 2, 2018 ESET Staff Share Posted October 2, 2018 4 hours ago, Heath said: Aha, so simple when you know how ?♂️ One last question...is there any way of refreshing this data field? For some agents the data is good, for others it simply shows either the IP of the computer on which the Agent is installed or, the FQDN of the computer on which the agent is installed? On some Agents it displays an old FQDN name which the Agent used to have before a site renaming task was done on the agent names in the ERA database? Field RemoteHosts shows IP address or hostname of machine where last connection of this client came from -> it is refreshed before each connection. In case it shows wrong hostname, it might be caused by wrong configuration of DNS that is performing reverse-DNS lookup. This value completely relies on IP address as seen by ERA/ESMC and does not depends on computer name shown in console, so renaming task has no impact on this field. There was also change in ESMC and only IP address should be shown, so no reverse-resolved hostnames will be present . Link to comment Share on other sites More sharing options...
Recommended Posts