I've set my two Infoblox internal DNS servers to log queries because I want to see if I am getting external queries to these boxes. But I am not seeing the query requests getting sent to ESM server. I see all other Infoblox type logs getting sent, just not DNS queries. Any ideas what I am missing?
Once I am actually receiving the data, I want to correlate all destination IP addr to two IP addresses and all destinations external to my controlled network. How would I best go about doing that?
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.