Create host records for each new agent login event

Your agent login records lack verified host context, forcing support to chase IPs and perform manual lookups. New host entries appear in your tracking table so triage can begin same day.