Reply

Second level domain names blocked by DNS Firewall

[ Edited ]
Adviser
Posts: 136
2253     0

This report shows second level domain names blocked by DNS Firewall. It helps to identify  false positives quickly.

<form>
  <label>1_L2 Domain Blocked on DNS Firewall</label>
  <fieldset submitButton="false" autoRun="true">
    <input type="time" token="datetime">
      <label></label>
      <default>
        <earliest>-7d@h</earliest>
        <latest>now</latest>
      </default>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>index=ib_dns_summary source="si-search-dns-rpz-hits" | rex field=DOMAIN_NAME "^.*(\.|^)(?&lt;l2domain&gt;[^\.]+\..*)" | table l2domain, TOTAL_COUNT | stats sum(TOTAL_COUNT) as Matches by l2domain | sort by Matches desc</query>
          <earliest>$datetime.earliest$</earliest>
          <latest>$datetime.latest$</latest>
        </search>
        <option name="wrap">true</option>
        <option name="rowNumbers">false</option>
        <option name="drilldown">cell</option>
        <option name="dataOverlayMode">none</option>
        <option name="count">10</option>
      </table>
    </panel>
  </row>
</form>

 

Showing results for 
Search instead for 
Do you mean 

Recommended for You