DNS_QUERY_V View

This view provides raw historic data about DNS queries.

Lacework regularly monitors for DNS queries in your environment and returns a row in the DNS_QUERY_V view when Lacework detects a DNS query.

Each row contains DNS Query information as listed in the columns.

Column Name	Data Type	Description
CREATED_TIME	Timestamp	The time and date when the DNS query was detected by Lacework.
MID	Number	The Lacework-generated machine identifier of the machine that generated the query.
FQDN	Text	The fully qualified domain name of DNS server.
HOST_IP_ADDR	Text	The IP address of the machine that generated the query.
TTL	Number	The time to live for the DNS query before the query expires.
DNS_SERVER_IP	Text	The resulting IP address of the DNS query.