Configure Log Export Internal DNS
All internal DNS queries sent to the internal DNS server are logged at the syslog server. Logs include the date and time, the internal domain being queried and the private IP, hostname and username of the source endpoint that made the query.
|
If AD integration is not configured for the VA, the hostname and username of the source endpoint are not available.
|
config logexport enable internaldns
Format for internal DNS queries:
- Date
- Time
- Hostname (forwarder)
- VA Label:
- InternalDNS
- Internal IP of source
- User AD identity of source (if a user identity is mapped to this IP else "NULL")
- Host AD identity of source (if a host identity is mapped to this IP else "NULL")
- Internal Domain being queried