Free Edition Viewing the correct host name and the IP address of connected machines in the action log viewer in the admin console (Admin > Audit > Action Log Viewer) depends on a series of factors related to the network and server Endpoint Central is hosted in. The following list breaks down likely scenarios and provides you the resulting IP address and hostname that you'll be able to view. The scenarios vary for IP address and Host name.
1. User and Endpoint Central Server machine is in the same network: Shows accurate IP address
2. Endpoint Central server console is accessed via a secure gateway server: Shows the IP address of the host of the secure gateway server.
3. Endpoint Central server console is accessed via a proxy/firewall: Shows the IP address of proxy/firewall.
4. Endpoint Central server console is accessed via VPN: Shows the IP address assigned by the VPN server.
5. Endpoint Central server console is accessed via mobile network: Shows the IP address provided by the Internet Service Provider.
Host name for any IP Address can be retrieved by doing a reverse look up in DNS Server. However, due to security configurations and caching related to DNS on your network, it's not possible to always show the exact host name. In other words, it completely depends on the user's network. In cases where it is unable to find the host name, its corresponding IP address will be displayed.