DNSCache collector

Prev Next

The DNSCache collector shows DNS information about device local cache.

Note

On Linux client systems, the DNSCache collector leverages the "nslookup" system command, which is not available by default on some Linux platforms. Hence, you might need to install the "nslookup" system command manually before running the DNSCache collector.

Collector output

Field

Type

Description

hostname

String

The host name.

ipaddress

String

The IP address of the host.



Supported versions

Windows

Linux

macOS

3.0 and later

3.0 and later

3.0 and later



Example: Show DNS information for host "ping.alot.com"
DNSCache where DNSCache hostname equals "ping.alot.com"


Which entries are for a domain hostname - single
DnsCache hostname, ipaddress
        WHERE DnsCacache hostname equals "foo.com"


Which entries are for a domain hostname - many
DnsCache hostname, ipaddress
        WHERE DnsCacache hostname equals "foo.com"
            OR DnsCache hostname equals "bar.com"
            OR DnsCache hostname equals "baz.com"


Which entries are for a domain IP - single
DnsCache hostname, ipaddress
        WHERE DnsCacache hostname equals "1.1.1.1"


Which entries are for a domain IP - many
DnsCache hostname, ipaddress
        WHERE DnsCacache hostname equals "1.1.1.1"
            OR DnsCache hostname equals "2.2.2.2"
            OR DnsCache hostname equals "3.3.3.3"


Example: Show DNS information for host "ping.alot.com"
DNSCache where DNSCache hostname equals "ping.alot.com"


Which entries are for a domain hostname - single
DnsCache hostname, ipaddress
        WHERE DnsCacache hostname equals "foo.com"


Which entries are for a domain hostname - many
DnsCache hostname, ipaddress
        WHERE DnsCacache hostname equals "foo.com"
            OR DnsCache hostname equals "bar.com"
            OR DnsCache hostname equals "baz.com"


Which entries are for a domain IP - single
DnsCache hostname, ipaddress
        WHERE DnsCacache hostname equals "1.1.1.1"


Which entries are for a domain IP - many
DnsCache hostname, ipaddress
        WHERE DnsCacache hostname equals "1.1.1.1"
            OR DnsCache hostname equals "2.2.2.2"
            OR DnsCache hostname equals "3.3.3.3"