I have two syslog based event source machines
1) se7 (
2) lab-world (
both machines sends their logs/events to sentinel.

I attempt a ssh login from 'lab-world'(source/ssh client) to 'se7'(ssh server), and then Click Search on Sentinel Web UI. Search is showing me following
TargetHostName(dhn): se7
ObserverHostName(sn): se7

whats the difference b.w "TargetHostName(dhn)" and "ObserverHostName(sn)" ? as in my case both are same, but is there a possibility that "shn" and "dhn" are different ?