Document toolboxDocument toolbox

Event ID Support

Data Connector supports the following Event IDs:

  • DNS Query: NIOS Query Logs
  • DNS Response: NIOS Response Logs & B1 Cloud query/response logs
  • RPZ  -<InfobloxRPZRuleType>-<act>:  NIOS RPZ Logs and Infoblox Threat Defense policy hits, where InfobloxRPZRuleType is one of te following: QNAME, IP, NSIP, NSDNAME, CLIENT-IP 
  • act: is an RPZ action e.g. PASSTHRU, NXDOMAIN, NODATA.
  • DHCP-LEASE  -<LeaseOp>:  Universal DDI DHCP lease logs, where LeaseOp is one of  the following: Create, Update, Delete, or Abandon.