Infoblox Exchange Cybersecurity Roadshow 2020 – Join us!
North America | Europe | Middle East/Africa | Asia-Pacific

Reporting

Reply

Last Queried - Query Logging

[ Edited ]
Adviser
Posts: 97
3583     4

This dashboard emulates the NIOS "Last Queried" feature using the Data Connector based query logging capability. The advantage to this approach is you can get last queried information for both authoritative and recursive queries.

 

Note that this method will not show records that exist, but have never been queried. This is because it relies on the DNS log. So if the record is never queried, it never gets into the log. Also, this method will not reflect querys handled by our DNS Caching Acceleration solution.

 

screencapture-10-60-16-214-ui-RZPYzWU_VsYKFYJUARLP3w-RZP97-P3w53-1500573170563.png

 

 

<form>
  <label>Last Queried - Query Logging</label>
  <fieldset submitButton="true">
    <input type="time" token="field1" searchWhenChanged="true">
      <label></label>
      <default>
        <earliest>-7d@h</earliest>
        <latest>now</latest>
      </default>
    </input>
    <input type="text" token="domain_filter" searchWhenChanged="true">
      <label>Domain/Host Filter</label>
      <default>*</default>
      <initialValue>*</initialValue>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <title>Queries</title>
        <search>
          <query>index="ib_dns_capture" $domain_filter$ | stats first(_time) AS latest_time by query | convert ctime(latest_time) |rename latest_time  as "Last Queried" query as Domain |sort -"Last Queried"</query>
          <earliest>$field1.earliest$</earliest>
          <latest>$field1.latest$</latest>
        </search>
        <option name="wrap">true</option>
        <option name="rowNumbers">false</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="count">50</option>
      </table>
    </panel>
  </row>
</form>

 

Showing results for 
Search instead for 
Do you mean 

Recommended for You