Query log

The Query Log lists every DNS lookup in near real time so you can audit policy outcomes, trace user reports, and confirm whether a domain was allowed, blocked, or proxied for a specific device or location.

Using the query log, you can view the DNS queries made during a specific time frame. By default, it displays all records to which you have access from the last 30 days. This includes all companies, locations, and devices to which you have access.  You can narrow down the results by using the Filters feature:

1. Search: You can search for a specific domain being requested, Location Name, or Device Name.
    
2. Date Range: Select the Start and End dates and times of the period you want to search through, up to a maximum of 30 days.
    
3. Status: You can filter by the result, if the domain was Allowed, Blocked, Proxied, or under Review.
    
4. Sort: You can narrow the results further by Type, Domain, Status, Location, Device, and IP Address.
    
5. Company: Narrow the results to a company under your organization.
    
6. Export your search results to a CSV file for further analysis. 
    
7. Actions Button: Allows you to create an override rule based on the specific query in the list selected.

Adding an Override from the Query Log

With the action menu Override, you can select a blocked DNS entry and add an override entry for the specific device or site listed on the query entry to do one of the following:

• Allow: This will override any policy/category setting
• Proxy: Still shows the page as a proxied site through our service that removes active scripts so you can determine if you want to allow the site.
• Redirect IP: Useful for an internal resource you want to direct the DNS entry to.