DNS Tracker Data
Add-ons that have CIM compatibility with the Network_Resolution datamodel will also work with Cyences’ DNS related alerts and dashboards.
Refer to A-TA-dns_inputs App on this GitHub Repo for inputs.conf reference for Windows based DNS servers. This is not complete inputs set for DNS.
Important sourcetypes to be collected
- WinEventLog:DNS Server
- MSAD:NT6:DNS
- MSAD:NT6:DNS-Health
- MSAD:NT6:DNS-Zone-Information