It is a Windows thing. The way name resolution works in Windows is to look at the local COMPUTERNAME, then the hosts file, then DNS/WINS, then NetBIOS. If Windows gets all the way down to NetBIOS, it will send directed NetBIOS queries to each device. This can cause resolution to take around four seconds per IP address.
When it comes to SyslogAnalyzer, each automated action will cause SA to try and resolve every associated IP address at start time. This can take a very long time depending on the number of devices/IPs and automated actions. The best solution is to make sure every IP is in either the local hosts file on Windows or in DNS.
A less acceptable workaround is to disable NetBIOS over TCP. This will effectively disable your ability to mount SMB shares over TCP, though.
