Solarwinds reverting my changes.

This sounds like a scheduled job within NCM or a compliance report with an auto-remediation script also within NCM. That's where I would begin looking to find what is reverting these changes.

Sorry just now responding to this.

When I go to Configs> Configuration Management > Transfer Status, I see actions for "execute Script" that completed.

At the end of each line I can click "show script results"

It shows the commands used to add an unwanted logging host to each device.

But when I click on Script managment on the same page, there are a few scripts but none of them reference this command.

Not sure what to do with that.

Thanks for your help!

 this certainly points to a Compliance Report running an auto-remediation script. As mesverrum  suggested it's probably best to review your compliance report rules within NCM and correct the offending rule to look for your new logging host config.

This link should point you in the right direction regarding Compliance Reports

https://documentation.solarwinds.com/en/Success_Center/ncm/Content/NCM-Manage-policy-rules.htm

Welp, thanks. That helped me find it.