> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/host-detail-view/settings.md). # Settings The host settings allow you to add more detailed information to a created host and assign tags at host level. You can also enable or disable various features of the Enginsight platform, provided they are not defined by a corresponding [policy manager](/docs/manual/english/platform-usage/hosts/management/policy-manager.md). {% hint style="danger" %} **Please note**: A policy overrides the host settings. If you do not want the host settings to be overridden, you can [exclude the host from the respective policy](/docs/manual/english/platform-usage/hosts/management/policy-manager/add-policy-manager.md#excluded-hosts). {% endhint %} *** Navigate to **Hosts** → **Overview** and click the name of a host to open the host detail menu on the [Dashboard](/docs/manual/english/platform-usage/host-detail-view/dashboard.md). Then click **Settings** in the host detail menu to configure the host.

*** ## Actions The following actions are available:

Option	Description
Save Changes	Click Save Changes after you configured all settings to apply the settings for the host. Please note: If you leave this view without saving, all settings you configured so far are lost and cannot be recovered.
Back	Click Back to navigate back to the Dashboard.
Remove	Click Remove and confirm the message that appears to delete all settings. Please note: Deleted settings cannot be recovered!

*** ## General Settings Here you can configure various basic settings.

The following options are available:

Option	Description
Alias	Enter a custom display name for the host.
Hostname	Shows the actual device name of the server or client. The hostname cannot be changed.
Description	Provide a more detailed description for the host. This field is optional.
Tags	Define tags that can be used to assign the host in other settings. This field is optional. Click in the Tags field to expand a list of all available tags and select one or more tags. Alternatively, use free-text input to find tags in the list more quickly. Click the Remove icon next to an added tag to remove it from the Tags field.
Technical Manager	Define a user who is responsible for maintaining and operating the host. This field is optional. Click in the Technical Manager field to expand a list of all available users and select a user. Alternatively, use free-text input to find users in the list more quickly. Click the Remove icon next to an added user to remove them from the Technical Manager field.
Specialist	Define a user who is responsible for the content-related and functional aspects of the host. This field is optional. Click in the Functional owner field to expand a list of all available users and select a user. Alternatively, use free-text input to find users in the list more quickly. Click the Remove icon next to an added user to remove them from the Specialist field.

*** ## Location Information Here you can add location information to the host to make it easier to locate. This can be helpful, for example, when you need to meet country-specific data protection regulations or other compliance requirements. {% hint style="info" %} All fields are optional. {% endhint %}

The following options are available:

Option	Description
Hoster	Enter the provider that hosts the host. Click in the Hoster field to expand a list of all already known hosting providers. Alternatively, use free-text input to specify a new hosting provider. Click the Remove icon next to a provider to remove it from the Hoster field.
Country	Select the country where the host is located. Click in the Country field to expand a list of all available countries. Alternatively, use free-text input to find a country in the list more quickly. Click the Remove icon next to a country name to remove it from the Country field.
City	Enter the city where the host is located. Click in the City field to expand a list of all already known cities. Alternatively, use free-text input to specify a new city. Click the Remove icon next to a city name to remove it from the City field.
Zip Code	Enter the postal code of the city where the host is located. Click in the Zip Code field to expand a list of all already known postal codes. Alternatively, use free-text input to specify a new postal code. Click the Remove icon next to a postal code to remove it from the Zip Code field.
Street	Enter the street where the host is located. Click in the Street field to expand a list of all already known streets. Alternatively, use free-text input to specify a new street. Click the Remove icon next to a street name to remove it from the Street field.
Building	Enter the building where the host is located. Click in the Building field to expand a list of all already known buildings. Alternatively, use free-text input to specify a new building. Click the Remove icon next to a building name to remove it from the Building field.
Floor	Enter the floor where the host is located. Click in the Floor field to expand a list of all already known floors. Alternatively, use free-text input to specify a new floor. Click the Remove icon next to a floor to remove it from the Floor field.
Room	Enter the room where the host is located. Click in the Room field to expand a list of all already known rooms. Alternatively, use free-text input to specify a new room. Click the Remove icon next to a room to remove it from the Room field.
Shortcut	Enter a custom location code for the host. Click in the Shortcut field to expand a list of all already known codes. Alternatively, use free-text input to specify a new shortcut. Click the Remove icon next to a code to remove it from the Shortcut field.

*** ## Core Feature Here you can enable or disable various Enginsight platform features for the host. {% hint style="warning" %} **Please note**: If a setting is already managed by a policy manager, the respective option is grayed out and the name of the corresponding policy manager is shown. Click the name of the policy manager to navigate to the [respective settings](/docs/manual/english/platform-usage/hosts/management/policy-manager.md). {% endhint %}

Select or deselect the checkbox next to a setting to enable or disable it. The following options are available:

Option	Description
Enginsight IDS	Allow network traffic on the host to be analyzed to detect potential attacks.
TLS Interception	This option is only visible on Linux hosts. Allow encrypted network traffic on the host to be decrypted and analyzed in order to detect potential attacks. This option can only be enabled if the Enginsight IDS option is also enabled. Please note: The TLS Interception feature is only supported on Linux hosts.
Enginsight IPS Shield	Allow connections to be blocked and network traffic on the host to be restricted to prevent potential attacks.
Advanced Persistent Threats	Allow the host to be checked for Advanced Persistent Threats.
File Integrity Monitoring	Allow the integrity of files and directories on the host to be monitored.
SIEM Integration	Allow the Pulsar installed on the host to send information to the Enginsight SIEM.
Run Custom Plugins	Allow custom scripts to be run on or by the host.
Unprivileged Plugin Execution	Allow the host to run plugins in unprivileged mode, meaning without administrator privileges on Windows or root privileges on Linux. To do this, corresponding accounts with limited permissions are created on the host. This option can only be enabled if the Run Custom Plugins option is also enabled. For more information on how plugin execution in unprivileged mode works, see our Knowledge Base: How can I execute plugins in unprivileged mode in Enginsight?

*** ## Advanced Settings Click in the **Advanced Settings** field to expand additional configuration options for the host.

### Intrusion Detection System (IDS) Here you can configure advanced settings for the IDS.

Select or deselect the checkbox next to an option to enable or disable the respective option. The following option is available:

Option	Description
IP Anonymization	Enable the anonymization of all IP addresses detected during attack detection. Visually, anonymization is represented using asterisks (*). Please note**: If IP address anonymization is enabled, this restricts platform functionality. For example, IP addresses can no longer be localized, blocked, or added to the whitelist.

### Automated System Updates Here you can configure the execution of automatic system updates.

Select or deselect the checkbox next to an option to enable or disable the respective option. The following options are available:

Option	Description
Automated System Updates	Allow all operating system updates to be installed automatically. This includes feature updates.
Only Security-Relevant Updates	Enable the automatic installation of only security-relevant operating system updates. Feature updates are not installed automatically with this option.
Restart the System After the Update	Allow the host to restart if an operating system update that requires a system restart has been installed.
Date Selection	This section is only shown if the Automated System Updates option is enabled. Use the time interval selection to define a custom schedule during which operating system updates are regularly and automatically installed on the host.
Updates to Exclude	This section is only shown if the Automated System updates option is enabled. Exclude specific operating system updates from automatic installation. You can use wildcards () here. Click the Remove* icon next to an update to remove it from the Updates to Exclude field.

#### Time Interval Selection

The following options are available:

Option	Description
Time Zone	Define the time zone that you want to use for the selected time interval. Click the Time Zone field to expand a list of all available time zones, and select a time zone.
Cron Expression (Vixie/Unix)	Shows the defined interval as a cron expression. The cron expression is updated automatically whenever you configure a time interval manually. Click the Cron Expression field to edit the cron expression manually.
Next Execution (Local Time Zone)	Shows the exact date and time of the next execution in your browser’s local time zone.
Description	Shows the defined interval for recurring execution as a plain-language description.
Time Interval Selection	Define a custom execution interval. Select the relevant minutes, hours, days of the month, months, or days of the week.

### Miscellaneous Here you can configure different miscellaneous settings.

Select or deselect the checkbox next to an option to enable or disable the respective option. The following options are available:

Option	Description
Software Monitoring using WMI	This option is only shown on Windows hosts. Allow the Pulsar installed on the host to use Windows Management Instrumentation (WMI) to monitor software applications. Please note: In rare cases, incorrect use of WMI by third-party software may lead to false-positive detections of vulnerabilities (Common Vulnerabilities and Exposures; CVE).
Exclude Roaming profiles	This option is only shown on Windows hosts. Enable this option to exclude roaming profiles stored on the host from monitoring.
Software Monitoring Using User Profiles	This option is only shown on Windows hosts. Allow the Pulsar installed on the host to use user profiles to monitor and inventory software applications. If this option is not enabled, only software that is installed system-wide and therefore available to all users on the system is searched for by default. If this option is enabled, software that is installed only on the systems of logged-in users is also searched for. Please note: In rare cases, using user profiles for software monitoring may result in outdated software being detected. This can happen, for example, with user profiles that are still listed in the registry even though the user no longer exists.
Default Software Monitoring: Every n Hours	Define how often the Pulsar installed on the host is allowed to scan files and directories to discover and inventory newly installed software. The default value is 1 hour. Click in the field Default Software Monitoring: Every n Hours and enter a value in hours.
Extended Software Monitoring	Allow the Pulsar installed on the host to deep-scan files and directories every 24 hours to discover and inventory newly installed software.
Extended Software Monitoring on All Disks	This field is only visible if the Extended Software Monitoring on All Disks option is enabled. Allow the Pulsar installed on the host to deep-scan files and directories on all disks.
Extended Service Monitoring	Enable monitoring of all services running on the host. Please note: If this option is disabled, only services that start automatically are monitored by default.
Recording of Security-relevant Events	Allow the Pulsar installed on the host to access logs and record security-relevant events.
Services to Exclude	Exclude specific services running on the host from monitoring. To do so, enter the name or names of the corresponding services. You can use wildcards () here. Please note: Excluded services are also not considered when generating alerts. Click the Remove* icon next to an entry to remove it from the Services to exclude field.
Connections to Exclude	Exclude specific connections to the host from monitoring. This can be useful if software that is actually considered trusted regularly opens and closes ports and therefore triggers false alarms. To do so, enter the name or names of the connections. You can use wildcards () here. Click the Remove* icon next to an entry to remove it from the Connections to Exclude field.
Disks to Exclude	Exclude specific disks on the host from monitoring. To do so, enter the disk path. You can use wildcards () here. Click the Remove* icon next to an entry to remove it from the Disks to Exclude field.
API URL	Define a custom API URL to which the Pulsar installed on the assigned host should send its results.

### Tray Icon Here you can configure settings for the Enginsight tray icon.

Select or deselect the checkbox next to an option to enable or disable the respective option. The following options are available:

Option	Description
Enable Enginsight Tray Icon	Enable the Enginsight tray icon to be shown on the desktop of the assigned host. Click the Enginsight tray icon on the host's desktop to expand the tray menu. The tray menu shows the version of the installed Pulsar. It also allows you to directly enable or disable showing notifications on the desktop by clicking Notifications.
Show Notifications	Enable notifications from the Enginsight platform to be shown on the desktop of the assigned host.

*** ## Further Resources **Knowledge Base** * [How can I execute plugins in unprivileged mode in Enginsight?](https://docs.enginsight.com/docs/knowledge-base/english/plugins/how-can-i-run-plugins-in-unprivileged-mode-in-enginsight) ***