This topic describes the fields in intranet private DNS (DNS) logs, public DNS resolution logs, and global traffic manager logs. The logs include global logs and module logs. Compared with global logs, module logs record DNS resolution processes in a more comprehensive manner.
Intranet private DNS logs
Field | Description |
__topic__ | The topic of the log. The value is fixed as dns_intranet_log. |
user_id | The ID of the Alibaba Cloud account. |
region_id | The ID of the region. |
vpc_id | The ID of the virtual private cloud (VPC). |
src_addr | The source IP address. |
dst_addr | The destination IP address. |
src_port | The source port. |
dst_port | The destination port. |
transport | The communication protocol. |
dns_msg_id | The ID of the DNS message. |
dns_msg_flags | The flags of the DNS message. |
query_name | The name of the query. |
query_type | The type of the query. |
rcode | The return code. |
answer_rrset | The answer resource record set (RRset). |
authority_rrset | The authoritative RRset. |
additional_rrset | The additional RRset. |
edns | The Extension Mechanisms for DNS. |
service_type | The type of the service. Valid values:
|
module_type | The type of the module. Valid values:
|
resolve_path | The resolution path. The value consists of five placeholders, which specify the AUTH_FAST, AUTH_SLOW, CACHE, FORWARD, and RECURSION modules. The placeholders are separated with commas (,). If 1 is specified for a placeholder, the module is involved in resolution. If 0 is specified for a placeholder, the module is not involved in resolution. |
rt | The response latency. The response latency in a global log indicates the response latency of the query. The response latency in a module log indicates the response latency of the module. |
view_name | The name of the line that the request hits. Example value: DEFAULT. |
ecs_id | The ID of the ECS instance. Example: i-2******************94. |
ecs_hostname | The hostname of the Elastic Compute Service (ECS) instance. Example: Y*****-c***-d**-02. |
To obtain the values of the ecs_id and ecs_hostname fields, log on to the Alibaba Cloud DNS console and create a service-linked role named AliyunServiceRoleForPvtz. For more information, see Service-linked role for PrivateZone.
Public DNS resolution logs
Field | Description |
__topic__ | The topic of the log. The value is fixed as |
user_id | The ID of the Alibaba Cloud account. |
region_id | The ID of the region. |
src_addr | The source IP address. |
dst_addr | The destination IP address. |
src_port | The source port. |
dst_port | The destination port. |
transport | The communication protocol. |
dns_msg_id | The ID of the DNS message. |
dns_msg_flags | The flags of the DNS message. |
query_name | The name of the query. |
query_type | The type of the query. |
rcode | The return code. |
answer_rrset | The RRset. |
authority_rrset | The authoritative RRset. |
additional_rrset | The additional RRset. |
edns | The Extension Mechanisms for DNS. |
service_type | The type of the service. Valid values:
|
module_type | The type of the module. Valid values:
|
resolve_path | The resolution path. The value consists of five placeholders, which specify the AUTH_FAST, AUTH_SLOW, CACHE, FORWARD, and RECURSION modules. The placeholders are separated with commas (,). If 1 is specified for a placeholder, the module is involved in resolution. If 0 is specified for a placeholder, the module is not involved in resolution. |
rt | The response latency. The response latency in a global log indicates the response latency of the query. The response latency in a module log indicates the response latency of the module. |
view_name | The name of the line that the request hits. Example value: DEFAULT. |
z_name | The name of the authoritative zone. |
wild_len | The length of the wildcard domain name that is hit. The wildcard domain name is in the wire format. |
value | The value in the RRset of the ans field. |
subnet | The subnet of the edns field. |
Global traffic manager logs
Field | Description |
__topic__ | The topic of the log. The value is fixed as dns_gtm_log. |
user_id | The ID of the Alibaba Cloud account. |
region_id | The ID of the region. |
src_addr | The source IP address. |
dst_addr | The destination IP address. |
src_port | The source port. |
dst_port | The destination port. |
transport | The communication protocol. |
dns_msg_id | The ID of the DNS message. |
dns_msg_flags | The flags of the DNS message. |
query_name | The name of the query. |
query_type | The type of the query. |
rcode | The return code. |
answer_rrset | The RRset. |
authority_rrset | The authoritative RRset. |
additional_rrset | The additional RRset. |
edns | The Extension Mechanisms for DNS. |
service_type | The type of the service. Valid values:
|
module_type | The type of the module. Valid values:
|
resolve_path | The resolution path. The value consists of five placeholders, which specify the AUTH_FAST, AUTH_SLOW, CACHE, FORWARD, and RECURSION modules. The placeholders are separated with commas (,). If 1 is specified for a placeholder, the module is involved in resolution. If 0 is specified for a placeholder, the module is not involved in resolution. |
rt | The response latency. The response latency in a global log indicates the response latency of the query. The response latency in a module log indicates the response latency of the module. |
view_name | The name of the line that the request hits. Example value: DEFAULT. |
z_name | The name of the authoritative zone. |
wild_len | The length of the wildcard domain name that is hit. The wildcard domain name is in the wire format. |
value | The value in the RRset of the ans field. |
subnet | The subnet of the edns field. |