Details
| ID | Microsoft_DNS_ModelingRule |
|---|---|
| From Version | 8.4.0 |
Schema
microsoft_dns_raw
| Field | Type | Array? |
|---|---|---|
_raw_log |
string | — |
channel |
string | — |
computer_name |
string | — |
dstPort |
string | — |
event_action |
string | — |
event_data |
string | — |
event_id |
int | — |
host_name |
string | — |
log_level |
string | — |
message |
string | — |
opcode |
string | — |
process_pid |
int | — |
process_thread_id |
int | — |
protocol |
string | — |
provider_name |
string | — |
questionName |
string | — |
questionType |
string | — |
record_id |
int | — |
responseCode |
string | — |
sourceIp |
string | — |
sourcePort |
string | — |
task |
string | — |
user |
string | — |