dns.windows

[ 1 Tag structure ] [ 2 Configuration ] [ 3 Table structure ]

The dns.windows tag identifies log events generated by the Windows Server Domain Name System (DNS).

Tag structure

This technology uses a single tag to support all events generated by the Windows Server Domain Name System (DNS). The tag is simply dns.windows and the associated events are saved in Devo in a table of the same name.

Product / Service	Tags	Data tables

Product / Service	Tags	Data tables
Windows DNS	`dns.windows`	`dns.windows`

For more information, read more about Devo tags.

Configuration

Create a simple rule on your Devo Relay that applies the dns.windows tag to all events arriving on a specified port. In the example below, we use port 13003 but you should use any port that you can dedicate to these events.

Source port → 13003
Target tag → dns.windows
Check the Stop processing and Sent without syslog tag checkboxes.

Table structure

These are the fields displayed in this table:

dns.windows

Field	Type	Field transformation	Source field name	Extra fields

Field	Type	Field transformation	Source field name	Extra fields
eventdate	`timestamp`
hostname	`str`	`ifthenelse(isnotnull(dnsserverfilebeat), dnsserverfilebeat, vhost)`	dnsserverfilebeat vhost
myserverday	`str`
myservertime	`str`
myserverampm	`str`
serverdate	`timestamp`	`parsedate(myserverdate, "MM/DD/YYYY hh:mm:ss A", "UTC")`	myserverdate
thread_id	`str`
context	`str`	`trim(mycontext)`	mycontext
int_packed_id	`str`		myintpacketid
protocol	`str`		myprotocol
send_receive	`str`		mysendreceive
remote_ip	`ip4`
x_id	`str`		myxid
query_response	`str`		myqueryresponse
query_response_def	`str`		myqueryresponse
op_code	`str`		myopcode
flags_hex	`str`		myflagshex
flags_char_codes	`str`		myflagscharcodes
response_code	`str`		myresponsecode
question_type	`str`		myquestiontype
question_name	`str`
question_dot	`str`		question_tokens
hostchain	`str`			✓
tag	`str`			✓
rawMessage	`str`			✓

Devo latest

dns.windows

Tag structure

Configuration

Table structure

dns.windows

Related articles