Infoblox Exchange Cybersecurity Roadshow 2020 – Join us!
North America | Europe | Middle East/Africa | Asia-Pacific

Reporting

Reply
Highlighted
Accepted Solution

Reporter custom end host report

Techie
Posts: 7
3419     0

Community:

Looking to create a custom report given a particular ip address representing a dns client; need to view all the dns requests and replies coming from that client and the dns server for a given time period.  Ideas on what to clone and use as search strings appreciated.

Highlighted

Re: Reporter custom end host report

Adviser
Posts: 136
3420     0

Hi,

 

You need to use Data Connector and forward query/response logs to the reporting server.

Here is a deployment guide:

https://www.infoblox.com/wp-content/uploads/infoblox-deployment-guide-implementing-infoblox-data-con...

 

You can access the logs using this search: "sourcetype=ib:dns:capture index=ib_dns_capture "

 

As a base for your report you can use "DNS Top Clients Querying MX Records"

 

BR,

Vadim

Highlighted

Re: Reporter custom end host report

Techie
Posts: 7
3420     0

Thanks

Showing results for 
Search instead for 
Do you mean 

Recommended for You