CB Response: Sensor displays as Local Host
search cancel

CB Response: Sensor displays as Local Host

book

Article ID: 287894

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Linux sensor displays the computer name as "Local Host" in the console

Environment

  • Carbon Black Response Console: All Versions
  • Carbon Black Response Sensors: All Versions
  • Linux: All Supported Versions

Cause

Configuration issue on the host machine

Resolution

  1. Open /etc/nsswitch.conf
  2. Change the order for hosts to check files before dns 
    hosts: files dns myhostname

Additional Information

The sensor first calls uname() then gethostbyname(). This checks /etc/resolv.conf to see who the DNS server is. Then checks /etc/nsswitch.conf to see what order we should check in. The OS then returns "localhost" which is used by the sensor
Powered by Wolken Software