Skip to main content

aggregated_dns

Creates, updates, deletes, gets or lists an aggregated_dns resource.

Overview

Nameaggregated_dns
TypeResource
Iddatadog.infrastructure.aggregated_dns

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
idstringA unique identifier for the aggregated DNS traffic based on the group by values.
attributesobjectAttributes for an aggregated DNS flow.
typestringAggregated DNS resource type. (default: aggregated_dns)

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
get_aggregated_dnsselectregionfrom, to, group_by, tags, limitGet all aggregated DNS traffic.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
regionstring(default: datadoghq.com)
frominteger (int64)Unix timestamp (number of seconds since epoch) of the start of the query window. If not provided, the start of the query window is 15 minutes before the to timestamp. If neither from nor to are provided, the query window is [now - 15m, now].
group_bystringComma-separated list of fields to group DNS traffic by. The server side defaults to network.dns_query if unspecified. server_ungrouped may be used if groups are not desired. The maximum number of group_by(s) is 10.
limitinteger (int32)The number of aggregated DNS entries to be returned. The maximum value is 7500. The default is 100.
tagsstringComma-separated list of tags to filter DNS traffic by.
tointeger (int64)Unix timestamp (number of seconds since epoch) of the end of the query window. If not provided, the end of the query window is the current time. If neither from nor to are provided, the query window is [now - 15m, now].

SELECT examples

Get all aggregated DNS traffic.

SELECT
id,
attributes,
type
FROM datadog.infrastructure.aggregated_dns
WHERE region = '{{ region }}' -- required
AND from = '{{ from }}'
AND to = '{{ to }}'
AND group_by = '{{ group_by }}'
AND tags = '{{ tags }}'
AND limit = '{{ limit }}'
;