Someone knows if is possible that stealthwatch show a HOST NAME next to the HOST ADDRESS (IP)
The users works fine between ise and LDAP, but i can´t see in Stealthwatch GUI the HOST NAME (LDAP).
I attach an example of the GUI as I see StealthWatch web dashboard.
I presume you're using Stealthwatch 7.0 from the picture, go to Stealthwatch Management Console, then to Central Management, choose SMC -> from Actions choose Edit Appliance Configuration for SMC -> within Appliance Configuration switch to Network Services -> then add on the right, manually the FQDNs of the host you want resolved in Local Resolution tab.
I added 2 snapshots for ease. Then you'll have the names resolved in Dashboard, specially in Host dashboard.
Have you configured your Stealthwatch Management Console (SMC) so that it can resolve using a local DNS? If so (and if the local IP is listed in the local DNS DB) I believe that those network addresses should resolve to host names in the WebGUI.
I hope this helps.
This is not working like this, I made sure both FlowCollectors and SMC can resolve the local FQDN of the servers, through the configured DNS server in SMC, even tested it on the SMC configuration page to make sure cache is corect, but in WebGUI the resolution does not happen, that is in my opinion wrong. SMC should try to resolve by itself the FQDN of the IPs, specially for the Server Host Groups. Or we should have an option in Host Group configuration where to mention if we ask SMC to do FQDN resolution or not for those host groups.