The DNS Activity Report provides comprehensive DNS and traffic data about your networks over a specific time period. To view the DNS Activity Report, navigate to the Reports section in the Cloud Services Portal (Reports -> DNS Activity). The default DNS report displays a bar chart showing the distribution of malicious hits for Source, Devices, and Users throughout your networks over the most recent one hour time span. The default report also lists detailed information about the respective events detected at the bottom of the report in the Events table.
| Note |
|---|
NOTE: Hovering over  on over the information icon on any of the report tabs to learn what data id is displayed within the report. |
...
Using the search query language, you can search all records with customized queries. By clicking the 
information icon located next to the search box, the Query Syntax resource window will appear. You can view sample search queries using the new search query syntax as provided in the tool-tip. Using the sample queries provided, you can construct your own queries to better assist in your searches. Refer to the specific sub-report to view the specific search queries applicable for that report.
...
- From: When selected a time dial and calendar appears where a time and date can be selected for the start time/date.
- To: When selected a time dial and calendar appears where a time and date can be selected for the end time/date.
Records Refresh
Clicking
Clickingthe view on Dossier icon located to the left of the time/date filtering tool, allows you to refresh the records on the page without refreshing and reloading the entire page and losing your in-place filters.
...
The table, located below the chart displays data collected for the selected DNS activity event type. The default layout is automatically loaded for viewing; however, the table can be customized by adding additional types of report information. To add additional information to a table, click 
to the expandable menu icon to select and display from the other additional information types listed in the option window. By default, events are displayed in chronological order based on information contained within the Detected column. Each of the columns can be sorted or reverse-sorted by clicking on the header label for the column.
...
DNS Activity Historical Data Reports
DNS Activity Historical Data reporting offers the capability to access data that goes back beyond the usual 30-day limit. To access historical data, you can create custom historical data reports by configuring queries and filters according to your organization's specific requirements. These customized reports allow you to obtain the precise historical data you need. It's important to note that saved historical data reports will be retained for a maximum of 30 days, after which they will be automatically deleted from the system.
To navigate to DNS Activity Historical Data reporting, on the DNS Activity page, click Historical Data Viewer located in the top, right-hand corner of the DNS Activity Report page.
For information on creating and running a historical data report, and viewing the report data, see DNS Activity Historical Data Report.
DNS Activity Report Descriptions
...