Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

3. Save the configuration and click Restart if it appears at the top of the screen.

Setting the DNSTAP Logging Queries

To set the DNSTAP logging queries, complete the following:

  1. From the Data Management tab, select the DNS tab, and then click Grid DNS Properties from the Toolbar.
  2. In the Grid DNS Properties, click Toggle Advanced Mode if the editor is in the basic mode, select the Logging tab, and then click Advanced tab and complete the following:
    1. DNSTAP settings for DNS Queries/Responses
    2. Queries
    3. Responses
    4. DNSTAP Receiver Address
    5. DNSTAP Receiver Port
    6. DNSTAP Identity
    7. DNSTAP Version
    8. Data connector for all DNS Queries/Responses to a Domain
      1. Capture DNS Queries
      2. Capture DNS Responses
      3. Capture queries/responses for all domains
      4. Limit capture to these domains
      5. Exclude the following domains
      6. Retain captured queries/replies on the local disk
      7. Export to
      8. Directory Path
      9. Server Address
      10. Username
      11. Password
    9. Limit query data collected per file to* minutes or 100MB (whichever comes first).
  3. Save the configuration and click Restart if it appears at the top of the screen.

Limitations of DNSTAP Logging Queries

  • DNSTAP logging queries works only for Cloud Data Connector (CDC). If CDC is not available, it will first check for a simple collector. 
  • Supports all protocols like UDP, TCP, and EDNS however, the dispatcher requires additional processing which decreases the performance.
  • Two FP cores are required to support 600k logs/sec.
  • No BIND9 DNSTAP support.
  • If the remote logging server is unable to be reached the logs are dropped rather than buffering them to prevent performance degradation.

Anchor
Viewing the Syslog
Viewing the Syslog
Anchor
bookmark2795
bookmark2795
Anchor
bookmark2796
bookmark2796
Viewing the Syslog

...