BIND 9.xx Query Extractor

the NEW Marketplace Other Solutions
1

GROK extractor for BIND query messages. Message type:

<30>Aug 20 10:41:21 ns1 named[1128]: 20-Aug-2022 10:41:21.107 queries: info: client @0x7f1b1411e6a7 10.160.4.103#55136 (in.appcenter.ms): query: in.appcenter.ms IN A + (10.160.50.4)

2

@IRQ10 thanks for the contribution. Contact me if you’d like to learn more about how the community can help you promote your query extractor.