uberAgent

DNS Query Monitoring Metrics

DNS Query Monitoring

uberAgent collects detailed information about DNS queries: the request, all responses, and the process from which the query originated.

Details

  • Source type: uberAgentESA:Process:DnsQuery
  • Used in dashboards: Process DNS
  • Enabled through configuration setting: DnsMonitoring
  • Related configuration settings: n/a
  • Supported platform: all

List of Fields in the Raw Agent Data

Field Description Data type Unit Example
ProcName Process name. String   svchost.exe
ProcGUID Process GUID. String   4b3e3686-7854-4d98-0023-1e0e617bf2e4
DnsRequest DNS query name. String   www.example.com
DnsResponse DNS query response. String   10.1.3.12
DnsResponseType DNS query response type (e.g.: A, AAAA, CNAME). String   A
DnsEventCount Number of requests in the last interval. Number   1

The fields DnsRequest, DnsResponse, and DnsResponseType may contain multiple values, separated by a semicolon ;.

List of Calculated Fields

Field Description Data type Unit Example Where available
TimestampMs _time * 1000. Number ms 1585913547467 Splunk data model
DNS Query Monitoring Metrics