05-17-2017 01:48 AM
05-17-2017 07:11 AM
The "DNS Query Rate by Member" is based on data from
which does not have this reply data.
However the "DNS Replies Trend" Reports provides this information:
and is based on
which have the member data so you can filter on a member:
index=ib_dns_summary report=si_dns_query_reply MEMBER="demogm1.infoblox.com" | stats sum(COUNT) as QCOUNT by _time, TYPE | eval QCOUNT=QCOUNT/10 | timechart bins=1000 avg(QCOUNT) by TYPE | interpolate 1200
05-21-2017 11:11 PM
Thanks for the info NJ. But do you have any info what are the dns RCODE inside the report like (success, Nxdomain, etc.)? We are comparing the results of the current monitoring tools.
05-22-2017 01:47 PM - edited 05-22-2017 01:48 PM
Oh Ok. Here it is: