| Field Name | Example Values | Field Type | Notes |
|---|---|---|---|
query_class
|
IN | keyword | Class of name query, usually IN for DNS |
query_record_type
|
A, AAAA, MX, SRV | keyword | Record type being requested |
query_record_type_code
|
1, 3, 5 | keyword | IANA assigned code for record type being requested |
query_request
|
www.graylog.org | keyword | Name being resolved in DNS request |
query_request_length
|
25 | Long | Length of name resolution request |
query_response
|
keyword | Name resolution answer | |
query_response_length
|
25 | Long | Length of name resolution response |
query_result
|
NXDOMAIN, NOERROR | keyword | Status of name resolution request |
query_result_code
|
0, 3 | keyword | IANA assigned DNS RCODE |
The following content is part of the Graylog Illuminate 6.3 documentation. If you are using another version of Illuminate, please switch to your version. For versions prior to 4.0, please see the legacy documentation.
