Infoblox Exchange Cybersecurity Roadshow 2020 – Join us!
North America | Europe | Middle East/Africa | Asia-Pacific

Reporting

Reply
Highlighted
Accepted Solution

Context of DNS Query Rate by Member report

Techie
Posts: 2
3707     0

Hi,

 

May I know the breakdown of the displayed values in "DNS Query Rate by Member" report (e.g. success, nxrrset, nxdomain, etc.)

Highlighted

Re: Context of DNS Query Rate by Member report

Adviser
Posts: 81
3708     0

Hello ssron1l0,

 

The "DNS Query Rate by Member" is based on data from

index=ib_dns_summary report=si_dns_member_qps_trend

which does not have this reply data.

 

However the "DNS Replies Trend" Reports provides this information:

Capture d’écran 2017-05-17 à 16.08.09.png

 

and is based on

index=ib_dns_summary report=si_dns_query_reply 

which have the member data so you can filter on a member:

 

index=ib_dns_summary report=si_dns_query_reply  MEMBER="demogm1.infoblox.com" | stats  sum(COUNT) as QCOUNT by _time, TYPE  | eval  QCOUNT=QCOUNT/10  | timechart  bins=1000 avg(QCOUNT) by TYPE  | interpolate  1200

 

Capture d’écran 2017-05-17 à 16.09.29.png

 

Check out our new Tech docs website at http://docs.infobox.com for latest documentation on Infoblox products.
Highlighted

Re: Context of DNS Query Rate by Member report

Techie
Posts: 2
3708     0

Thanks for the info NJ. But do you have any info what are the dns RCODE inside the report like (success, Nxdomain, etc.)? We are comparing the results of the current monitoring tools.

Highlighted

Re: Context of DNS Query Rate by Member report

[ Edited ]
Adviser
Posts: 81
3708     0

Oh Ok. Here it is:

https://community.infoblox.com/t5/Reporting/Success-rate-by-query-type-question/m-p/7368#U7368

 

Check out our new Tech docs website at http://docs.infobox.com for latest documentation on Infoblox products.
Showing results for 
Search instead for 
Do you mean 

Recommended for You