Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Dennis_Longneck
Explorer

Create a Smart Event Report on DNS Queries By Day

Has anyone created a SmartEvent report that will show me Create a Smart Event Report on DNS Queries By Day?  I would like to see the number of queries by day for a given week.

I started to try to create something but got all confused.

Dennis

0 Kudos
2 Replies
PhoneBoy
Admin
Admin

Logs for DNS queries are connection oriented by default.
These types of logs are not typically correlated on by default.

Curious: why is this an interesting metric?

0 Kudos
Dennis_Longneck
Explorer

I get a weekly report from MS-ISAC for MDBR queries by day.  The number of queries seemed high to me.  I wanted to validate them.

0 Kudos