microsoft/windows-dns-debug
| Vendor | Microsoft Corporation | Parsers | โ |
| Author | CrowdStrike | Dashboards | โ |
| Version | 1.5.2 | Alerts | โ |
| Minimum LogScale Version | 1.207.0 | Actions | โ |
| Use Cases | ITOps SecOps | Scheduled Searches | โ |
| Supported Log Formats |
| ย | ย |
| Security Domain | Network & Infrastructure Security | ย | ย |
| Field | Format | Timezone |
|---|---|---|
| `__timestamp` | M/d/yyyy h:mm:ss a | UTC |
| `__timestamp` | yyyy-M-d h:mm:ss a | UTC |
| `__timestamp` | d.M.yyyy HH:mm:ss | UTC |
| `__timestamp` | d/M/yyyy HH:mm:ss | UTC |
| `__timestamp` | d-M-yyyy H:mm:ss | UTC |
Enables parsing of DNS debug logs that contain DNS server information by the Windows Server.