The DNSCache collector shows DNS information about device local cache.
Note
On Linux client systems, the DNSCache collector leverages the "nslookup" system command, which is not available by default on some Linux platforms. Hence, you might need to install the "nslookup" system command manually before running the DNSCache collector.
Collector output
Field | Type | Description |
|---|---|---|
hostname | String | The host name. |
ipaddress | String | The IP address of the host. |
Example: Show DNS information for host "ping.alot.com"
DNSCache where DNSCache hostname equals "ping.alot.com"
Which entries are for a domain hostname - single
DnsCache hostname, ipaddress WHERE DnsCacache hostname equals "foo.com"
Which entries are for a domain hostname - many
DnsCache hostname, ipaddress WHERE DnsCacache hostname equals "foo.com" OR DnsCache hostname equals "bar.com" OR DnsCache hostname equals "baz.com"
Which entries are for a domain IP - single
DnsCache hostname, ipaddress WHERE DnsCacache hostname equals "1.1.1.1"
Which entries are for a domain IP - many
DnsCache hostname, ipaddress WHERE DnsCacache hostname equals "1.1.1.1" OR DnsCache hostname equals "2.2.2.2" OR DnsCache hostname equals "3.3.3.3"
Example: Show DNS information for host "ping.alot.com"
DNSCache where DNSCache hostname equals "ping.alot.com"
Which entries are for a domain hostname - single
DnsCache hostname, ipaddress WHERE DnsCacache hostname equals "foo.com"
Which entries are for a domain hostname - many
DnsCache hostname, ipaddress WHERE DnsCacache hostname equals "foo.com" OR DnsCache hostname equals "bar.com" OR DnsCache hostname equals "baz.com"
Which entries are for a domain IP - single
DnsCache hostname, ipaddress WHERE DnsCacache hostname equals "1.1.1.1"
Which entries are for a domain IP - many
DnsCache hostname, ipaddress WHERE DnsCacache hostname equals "1.1.1.1" OR DnsCache hostname equals "2.2.2.2" OR DnsCache hostname equals "3.3.3.3"