Network Management

UDT Endpoint Details for Hostnames missing data

Endpoint details for hostname only missing historical data. When you search for a hostname for a disconnected endpoint the "History Connections" resources do not contain any data.

First published date

11/12/2018 8:55 PM

Last published date

3/7/2022 6:32 AM

Overview

When you search for a hostname for a disconnected endpoint the "History Connections" resources do not contain any data. 

Product section

User Device Tracker

Resolution

In UDT, an active Connection can show IP/MAC/Hostname, as well as the user and what device it's currently seen on. However, when that port is shut down or the device is disconnected, this is all no longer on the same page. This is because we are getting hostnames as part of the Audit Events, we use to track user logins, and the UDT server attempts to resolve the hostname for an IP address the router/switch shows in use via DNS. When the endpoint is no longer connected, the DNS resolution can and, at times, will fail. 

 

Therefore, the hostname we get from the Audit Event is still present as part of the event, but not resolving. It still shows as an endpoint, but without the physical connection details.