Splunk Enterprise Security

Does Network resolution datamodel includes outbound and inbound DNS transfers?

Woodpecker
Path Finder

Does the network resolution datamodel includes both Outbound and Inbound DNS transfers?

Labels (1)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

The datamodel includes query_type field so depending on your source, its configuration and the add-on you're using for data ingestion, I suppose it might include AXFR or IXFR. But I'd test before relying on it.

0 Karma
Get Updates on the Splunk Community!

Monitoring Postgres with OpenTelemetry

Behind every business-critical application, you’ll find databases. These behind-the-scenes stores power ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...